7.5

CVE-2004-0848

Buffer overflow in Microsoft Office XP allows remote attackers to execute arbitrary code via a link with a URL file location containing long inputs after (1) "%00 (null byte) in .doc filenames or (2) "%0a" (carriage return) in .rtf filenames.
Daten sind bereitgestellt durch National Vulnerability Database (NVD)
Microsoft ≫ Office Versionxp Updatesp1
Microsoft ≫ Office Versionxp Updatesp2
Microsoft ≫ Office Versionxp Updatesp3
Microsoft ≫ Powerpoint Version2002
Microsoft ≫ Powerpoint Version2002 Updatesp1
Microsoft ≫ Powerpoint Version2002 Updatesp2
Microsoft ≫ Powerpoint Version2002 Updatesp3
Microsoft ≫ Project Version2002
Microsoft ≫ Project Version2002 Updatesp1
Microsoft ≫ Visio Version2002
Microsoft ≫ Visio Version2002 Updatesp1
Microsoft ≫ Visio Version2002 Updatesp2
Microsoft ≫ Visio Version2002 Updatesp2 Editionprofessional
Microsoft ≫ Visio Version2002 Updatesp2 Editionstandard
Microsoft ≫ Word Version2002
Microsoft ≫ Word Version2002 Updatesp1
Microsoft ≫ Word Version2002 Updatesp2
Microsoft ≫ Word Version2002 Updatesp3
Microsoft ≫ Works Version2002
Microsoft ≫ Works Version2003
Microsoft ≫ Works Version2004
Zu dieser CVE wurde keine Warnung gefunden.
EPSS Metriken
Typ Quelle Score Percentile
EPSS FIRST.org 27.49% 0.978
CVSS Metriken
Quelle Base Score Exploit Score Impact Score Vector String
nvd@nist.gov 7.5 10 6.4
AV:N/AC:L/Au:N/C:P/I:P/A:P
Es wurden noch keine Informationen zu CWE veröffentlicht.
http://www.us-cert.gov/cas/techalerts/TA05-039A.html
Patch
Third Party Advisory
US Government Resource
http://www.kb.cert.org/vuls/id/416001
Patch
Third Party Advisory
US Government Resource
https://docs.microsoft.com/en-us/security-updates/securitybulletins/2005/ms05-005
https://exchange.xforce.ibmcloud.com/vulnerabilities/19107
https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A2348
https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A2738
https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A4022