Read the docs

Vulnerabilities

Filters

Reset all
Threatist priority
Signals
Fix status
Impact type
Attack vector
Requirements
Product

Products as named in CPE, with their records.

Published
Weakness (CWE)
2 selected

59 records

Priority MEDIUM 64

Heap-based buffer overflow in the Office Works File Converter in Microsoft Office 2007 SP2, Works 9, and Works 6-9 File Converter allows remote attackers to execute arbitrary code via a crafted Works (aka .wps) file, aka…

CVSS 2.0HIGH 9.3 Network No auth Interaction — EPSS 0.30052 Published 2012-04-10 No fix listed CWE-119
Priority MEDIUM 59

The TIFF image converter in the graphics filters in Microsoft Office XP SP3, Office Converter Pack, and Works 9 does not properly convert data, which allows remote attackers to execute arbitrary code or cause a denial of…

CVSS 2.0HIGH 9.3 Network No auth Interaction — EPSS 0.20463 Published 2010-12-16 No fix listed CWE-119
Priority MEDIUM 63

Heap-based buffer overflow in the TIFF image converter in the graphics filters in Microsoft Office XP SP3, Office Converter Pack, and Works 9 allows remote attackers to execute arbitrary code via a crafted TIFF image in…

CVSS 2.0HIGH 9.3 Network No auth Interaction — EPSS 0.28849 Published 2010-12-16 No fix listed CWE-119
Priority MEDIUM 64

Integer overflow in the text converters in Microsoft Office Word 2002 SP3 and 2003 SP3; Works 8.5; Office Converter Pack; and WordPad in Windows 2000 SP4, XP SP2 and SP3, and Server 2003 SP2 allows remote attackers to ex…

CVSS 2.0HIGH 9.3 Network No auth Interaction — EPSS 0.31232 Published 2009-12-09 No fix listed CWE-189
Priority MEDIUM 59

GDI+ in Microsoft Office XP SP3 does not properly handle malformed objects in Office Art Property Tables, which allows remote attackers to execute arbitrary code via a crafted Office document that triggers memory corrupt…

CVSS 2.0HIGH 9.3 Network No auth Interaction — EPSS 0.20452 Published 2009-10-14 No fix listed CWE-94
Priority MEDIUM 59

Multiple integer overflows in unspecified APIs in GDI+ in Microsoft .NET Framework 1.1 SP1, .NET Framework 2.0 SP1 and SP2, Windows XP SP2 and SP3, Windows Server 2003 SP2, Vista Gold and SP1, Server 2008 Gold, Office XP…

CVSS 2.0HIGH 9.3 Network No auth Interaction — EPSS 0.20982 Published 2009-10-14 No fix listed CWE-189
Priority MEDIUM 62

Heap-based buffer overflow in GDI+ in Microsoft Internet Explorer 6 SP1, Windows XP SP2 and SP3, Office XP SP3, Office 2003 SP3, 2007 Microsoft Office System SP1 and SP2, Office Project 2002 SP1, Visio 2002 SP2, Office W…

CVSS 2.0HIGH 9.3 Network No auth Interaction — EPSS 0.26715 Published 2009-10-14 No fix listed CWE-119
Priority MEDIUM 64

Microsoft Office PowerPoint 2000 SP3, 2002 SP3, 2003 SP3, and 2007 SP1 and SP2; PowerPoint Viewer 2003 and 2007 SP1 and SP2; PowerPoint in Microsoft Office 2004 for Mac and 2008 for Mac; Open XML File Format Converter fo…

CVSS 2.0HIGH 9.3 Network No auth Interaction — EPSS 0.30077 Published 2009-05-12 No fix listed CWE-94
Priority MEDIUM 60

Microsoft Office Word 2000 SP3, 2002 SP3, 2003 SP3, and 2007 Gold and SP1; Outlook 2007 Gold and SP1; Word Viewer 2003 Gold and SP3; Office Compatibility Pack for Word, Excel, and PowerPoint 2007 File Formats Gold and SP…

CVSS 2.0HIGH 9.3 Network No auth Interaction — EPSS 0.2339 Published 2008-12-10 No fix listed CWE-399
Priority MEDIUM 60

Microsoft Office Word 2000 SP3, 2002 SP3, 2003 SP3, and 2007 Gold and SP1; Outlook 2007 Gold and SP1; Word Viewer 2003 Gold and SP3; and Office Compatibility Pack for Word, Excel, and PowerPoint 2007 File Formats Gold an…

CVSS 2.0HIGH 9.3 Network No auth Interaction — EPSS 0.2339 Published 2008-12-10 No fix listed CWE-399
Priority HIGH 65

Double free vulnerability in Microsoft Office Word 2000 SP3, 2002 SP3, 2003 SP3, and 2007 Gold and SP1; Outlook 2007 Gold and SP1; Word Viewer 2003 Gold and SP3; Office Compatibility Pack for Word, Excel, and PowerPoint…

CVSS 2.0HIGH 9.3 Network No auth Interaction — EPSS 0.33906 Published 2008-12-10 No fix listed CWE-399
Priority HIGH 65

Integer overflow in Microsoft Office Word 2000 SP3, 2002 SP3, 2003 SP3, and 2007 Gold and SP1; Outlook 2007 Gold and SP1; Word Viewer 2003 Gold and SP3; Office Compatibility Pack for Word, Excel, and PowerPoint 2007 File…

CVSS 2.0HIGH 9.3 Network No auth Interaction — EPSS 0.32943 Published 2008-12-10 No fix listed CWE-119
Priority MEDIUM 63

Microsoft Office Word 2000 SP3 and 2002 SP3 and Office 2004 for Mac allow remote attackers to execute arbitrary code via a Word document with a crafted lcbPlcfBkfSdt field in the File Information Block (FIB), which bypas…

CVSS 2.0HIGH 9.3 Network No auth Interaction — EPSS 0.28876 Published 2008-12-10 No fix listed CWE-94
Load more