7.5

CVE-2004-0848

Buffer overflow in Microsoft Office XP allows remote attackers to execute arbitrary code via a link with a URL file location containing long inputs after (1) "%00 (null byte) in .doc filenames or (2) "%0a" (carriage return) in .rtf filenames.

Daten sind bereitgestellt durch National Vulnerability Database (NVD)
Microsoft ≫ Office Versionxp Updatesp1
Microsoft ≫ Office Versionxp Updatesp2
Microsoft ≫ Office Versionxp Updatesp3
Microsoft ≫ Powerpoint Version2002
Microsoft ≫ Powerpoint Version2002 Updatesp1
Microsoft ≫ Powerpoint Version2002 Updatesp2
Microsoft ≫ Powerpoint Version2002 Updatesp3
Microsoft ≫ Project Version2002
Microsoft ≫ Project Version2002 Updatesp1
Microsoft ≫ Visio Version2002
Microsoft ≫ Visio Version2002 Updatesp1
Microsoft ≫ Visio Version2002 Updatesp2
Microsoft ≫ Visio Version2002 Updatesp2 Editionprofessional
Microsoft ≫ Visio Version2002 Updatesp2 Editionstandard
Microsoft ≫ Word Version2002
Microsoft ≫ Word Version2002 Updatesp1
Microsoft ≫ Word Version2002 Updatesp2
Microsoft ≫ Word Version2002 Updatesp3
Microsoft ≫ Works Version2002
Microsoft ≫ Works Version2003
Microsoft ≫ Works Version2004
Zu dieser CVE wurde keine CISA KEV oder CERT.AT-Warnung gefunden.
EPSS Metriken
Typ Quelle Score Percentile
EPSS FIRST.org 42.12% 0.973
CVSS Metriken
Quelle Base Score Exploit Score Impact Score Vector String
nvd@nist.gov 7.5 10 6.4
AV:N/AC:L/Au:N/C:P/I:P/A:P
http://www.us-cert.gov/cas/techalerts/TA05-039A.html
Patch
Third Party Advisory
US Government Resource
http://www.kb.cert.org/vuls/id/416001
Patch
Third Party Advisory
US Government Resource