Priority CRITICAL 97KEV
Unspecified vulnerability in Microsoft Excel 2000, XP, 2003, and 2004 for Mac, and possibly other Office products, allows remote user-assisted attackers to execute arbitrary code via unknown attack vectors, as demonstrat…
CVSS 3.1HIGH 8.8· Network · No auth · User interaction · EPSS 0.44099 · Published 2007-02-03 · No fix listed
Priority CRITICAL 93KEV
Microsoft Visio 2007 SP3, Visio 2010 SP2, Visio 2013 SP1, Visio 2016, Visio Viewer 2007 SP3, and Visio Viewer 2010 mishandle library loading, which allows local users to gain privileges via a crafted application, aka "Mi…
CVSS 3.1HIGH 7.8· Local · No auth · User interaction · EPSS 0.43308 · Published 2016-06-16 · No fix listed
Priority HIGH 76
Heap-based buffer overflow in VBE.DLL and VBE6.DLL of Microsoft Visual Basic for Applications (VBA) SDK 5.0 through 6.3 allows remote attackers to execute arbitrary code via a document with a long ID parameter.
CVSS 2.0HIGH 10.0· Network · No auth · Interaction — · EPSS 0.54873 · Published 2003-09-04 · No fix listed
Priority HIGH 72
gdiplus.dll in GDI+ in Microsoft Internet Explorer 6 SP1, Windows XP SP2 and SP3, Server 2003 SP1 and SP2, Vista Gold and SP1, Server 2008, Office XP SP3, Office 2003 SP2 and SP3, 2007 Microsoft Office System Gold and SP…
CVSS 2.0HIGH 9.3· Network · No auth · Interaction — · EPSS 0.52065 · Published 2008-09-10 · No fix listed CWE-399
Priority HIGH 72
Integer overflow in GDI+ in Microsoft Internet Explorer 6 SP1, Windows XP SP2 and SP3, Server 2003 SP1 and SP2, Vista Gold and SP1, Server 2008, Office XP SP3, Office 2003 SP2 and SP3, 2007 Microsoft Office System Gold a…
CVSS 2.0HIGH 9.3· Network · No auth · Interaction — · EPSS 0.52886 · Published 2008-09-10 · No fix listed CWE-189
Priority HIGH 71
Buffer overflow in the JPEG (JPG) parsing engine in the Microsoft Graphic Device Interface Plus (GDI+) component, GDIPlus.dll, allows remote attackers to execute arbitrary code via a JPEG image with a small JPEG COM fiel…
CVSS 2.0HIGH 9.3· Network · No auth · Interaction — · EPSS 0.49024 · Published 2004-09-17 · No fix listed
Priority HIGH 70
Buffer overflow in VISIODWG.DLL before 10.0.6880.4 in Microsoft Office Visio allows user-assisted remote attackers to execute arbitrary code via a crafted DXF file, a different vulnerability than CVE-2010-0254 and CVE-20…
CVSS 2.0HIGH 7.6· Network · No auth · Interaction — · EPSS 0.67309 · Published 2010-05-05 · No fix listed CWE-119
Priority HIGH 68
Microsoft Internet Explorer 5.01, 5.5, and 6 allows remote attackers to cause a denial of service (application crash) and possibly execute arbitrary code via a web page with embedded CLSIDs that reference certain COM obj…
CVSS 2.0HIGH 7.5· Network · No auth · Interaction — · EPSS 0.63246 · Published 2005-08-19 · No fix listed CWE-119
Priority HIGH 67
Integer overflow in gdiplus.dll in GDI+ in Microsoft Office XP SP3, Office 2003 SP2 and SP3, 2007 Microsoft Office System Gold and SP1, Visio 2002 SP2, PowerPoint Viewer 2003, Works 8, Digital Image Suite 2006, SQL Serve…
CVSS 2.0HIGH 9.3· Network · No auth · Interaction — · EPSS 0.39272 · Published 2008-09-10 · No fix listed CWE-189
Priority HIGH 66
Buffer overflow in gdiplus.dll in GDI+ in Microsoft Internet Explorer 6 SP1, Windows XP SP2 and SP3, Server 2003 SP1 and SP2, Vista Gold and SP1, Server 2008, Office XP SP3, Office 2003 SP2 and SP3, 2007 Microsoft Office…
CVSS 2.0HIGH 9.3· Network · No auth · Interaction — · EPSS 0.36722 · Published 2008-09-10 · No fix listed CWE-119
Priority HIGH 65
Unspecified vulnerability in mso.dll in Microsoft Office 2000, XP, and 2003, and Microsoft PowerPoint 2000, XP, and 2003, allows remote user-assisted attackers to execute arbitrary code via a malformed record in a (1) .D…
CVSS 2.0HIGH 9.3· Network · No auth · Interaction — · EPSS 0.33848 · Published 2006-10-10 · No fix listed CWE-94
Priority MEDIUM 64
gdiplus.dll in GDI+ in Microsoft Internet Explorer 6 SP1, Windows XP SP2 and SP3, Server 2003 SP1 and SP2, Vista Gold and SP1, Server 2008, Office XP SP3, Office 2003 SP2 and SP3, 2007 Microsoft Office System Gold and SP…
CVSS 2.0HIGH 9.3· Network · No auth · Interaction — · EPSS 0.31037 · Published 2008-09-10 · No fix listed CWE-119
Priority MEDIUM 64
Unspecified vulnerability in Microsoft Visio 2002 SP2, 2003 SP2 and SP3, and 2007 up to SP1 allows user-assisted remote attackers to execute arbitrary code via a crafted .DXF file, aka "Visio Memory Validation Vulnerabil…
CVSS 2.0HIGH 9.3· Network · No auth · Interaction — · EPSS 0.32106 · Published 2008-04-08 · No fix listed CWE-399
Priority MEDIUM 64
Unspecified vulnerability in Microsoft Visio 2002 SP2, 2003 SP2 and SP3, and 2007 up to SP1 allows user-assisted remote attackers to execute arbitrary code via a Visio file containing crafted object header data, aka "Vis…
CVSS 2.0HIGH 9.3· Network · No auth · Interaction — · EPSS 0.32106 · Published 2008-04-08 · No fix listed CWE-94
Priority MEDIUM 64
Multiple unspecified vulnerabilities in Microsoft Visio 2002 allow remote user-assisted attackers to execute arbitrary code via a Visio (.VSD, VSS, .VST) file with a crafted packed object that triggers memory corruption,…
CVSS 2.0HIGH 9.3· Network · No auth · Interaction — · EPSS 0.30914 · Published 2007-06-12 · No fix listed
Priority MEDIUM 64
Unspecified vulnerability in Microsoft Visio 2002 allows remote user-assisted attackers to execute arbitrary code via a Visio (.VSD, VSS, .VST) file with a crafted version number that triggers memory corruption.
CVSS 2.0HIGH 9.3· Network · No auth · Interaction — · EPSS 0.30914 · Published 2007-06-12 · No fix listed
Priority MEDIUM 62
Microsoft Visio Viewer 2010 SP1 allows remote attackers to execute arbitrary code via a crafted Visio file that triggers incorrect memory allocation, aka "Visio Viewer Tree Object Type Confusion Vulnerability."
CVSS 2.0HIGH 9.3· Network · No auth · Interaction — · EPSS 0.26684 · Published 2013-03-13 · No fix listed
Priority MEDIUM 62
Heap-based buffer overflow in GDI+ in Microsoft Internet Explorer 6 SP1, Windows XP SP2 and SP3, Office XP SP3, Office 2003 SP3, 2007 Microsoft Office System SP1 and SP2, Office Project 2002 SP1, Visio 2002 SP2, Office W…
CVSS 2.0HIGH 9.3· Network · No auth · Interaction — · EPSS 0.26715 · Published 2009-10-14 · No fix listed CWE-119
Priority MEDIUM 61
Buffer overflow in Microsoft Visio 2010 SP1 and Visio Viewer 2010 SP1 allows remote attackers to execute arbitrary code via a crafted Visio file, aka "Visio DXF File Format Buffer Overflow Vulnerability."
CVSS 2.0HIGH 9.3· Network · No auth · Interaction — · EPSS 0.24151 · Published 2012-08-15 · No fix listed CWE-119
Priority MEDIUM 61
The LZW stream decompression functionality in ORMELEMS.DLL in Microsoft Visio 2002 SP2, 2003 SP3, and 2007 SP2 allows remote attackers to execute arbitrary code via a Visio file with a malformed VisioDocument stream that…
CVSS 2.0HIGH 9.3· Network · No auth · Interaction — · EPSS 0.24225 · Published 2011-02-10 · No fix listed CWE-94
Priority MEDIUM 61
Integer overflow in GDI+ in Microsoft Internet Explorer 6 SP1, Windows XP SP2 and SP3, Office XP SP3, Office 2003 SP3, 2007 Microsoft Office System SP1 and SP2, Office Project 2002 SP1, Visio 2002 SP2, Office Word Viewer…
CVSS 2.0HIGH 9.3· Network · No auth · Interaction — · EPSS 0.23647 · Published 2009-10-14 · No fix listed CWE-189
Priority MEDIUM 61
Unspecified vulnerability in the Brazilian Portuguese Grammar Checker in Microsoft Office 2003 and the Multilingual Interface for Office 2003, Project 2003, and Visio 2003 allows user-assisted remote attackers to execute…
CVSS 2.0HIGH 9.3· Network · No auth · Interaction — · EPSS 0.24061 · Published 2007-01-09 · No fix listed
Priority MEDIUM 60
Buffer overflow in Microsoft Visio 2007 SP3 and 2010 SP2 allows remote attackers to execute arbitrary code via crafted UML data in an Office document, aka "Microsoft Office Memory Corruption Vulnerability."
CVSS 2.0HIGH 9.3· Network · No auth · Interaction — · EPSS 0.22491 · Published 2015-10-14 · No fix listed CWE-119
Priority MEDIUM 60
Microsoft Visio 2003 SP3 and 2007 SP2 does not properly validate objects in memory during Visio file parsing, which allows remote attackers to execute arbitrary code via a crafted file, aka "Move Around the Block RCE Vul…
CVSS 2.0HIGH 9.3· Network · No auth · Interaction — · EPSS 0.22201 · Published 2011-08-10 · No fix listed CWE-20
Priority MEDIUM 60
Microsoft Visio 2003 SP3, 2007 SP2, and 2010 Gold and SP1 does not properly validate objects in memory during Visio file parsing, which allows remote attackers to execute arbitrary code via a crafted file, aka "pStream R…
CVSS 2.0HIGH 9.3· Network · No auth · Interaction — · EPSS 0.22201 · Published 2011-08-10 · No fix listed CWE-20
Load more