Microsoft

Office

952 vulnerabilities found.

Hinweis: Diese Liste kann unvollständig sein. Daten werden ohne Gewähr im Ursprungsformat bereitgestellt.
4.3

CVE-2012-5672

Exploit
  • EPSS 17.4%
  • Published 25.10.2012 10:51:29
  • Last modified 11.04.2025 00:51:21

Microsoft Excel Viewer (aka Xlview.exe) and Excel in Microsoft Office 2007 (aka Office 12) allow remote attackers to cause a denial of service (read access violation and application crash) via a crafted spreadsheet file, as demonstrated by a .xls fil...

9.3

CVE-2012-1856

Warning
  • EPSS 92.14%
  • Published 15.08.2012 01:55:01
  • Last modified 11.04.2025 00:51:21

The TabStrip ActiveX control in the Common Controls in MSCOMCTL.OCX in Microsoft Office 2003 SP3, Office 2003 Web Components SP3, Office 2007 SP2 and SP3, Office 2010 SP1, SQL Server 2000 SP4, SQL Server 2005 SP4, SQL Server 2008 SP2, SP3, R2, R2 SP1...

9.3

CVE-2012-2524

  • EPSS 53.23%
  • Published 15.08.2012 01:55:01
  • Last modified 11.04.2025 00:51:21

Microsoft Office 2007 SP2 and SP3 and 2010 SP1 allows remote attackers to execute arbitrary code or cause a denial of service (memory corruption) via a crafted Computer Graphics Metafile (CGM) file, aka "CGM File Format Memory Corruption Vulnerabilit...

6.9

CVE-2012-1894

  • EPSS 0.49%
  • Published 10.07.2012 21:55:06
  • Last modified 11.04.2025 00:51:21

Microsoft Office for Mac 2011 uses world-writable permissions for the "Applications/Microsoft Office 2011/" directory and certain other directories, which allows local users to gain privileges by placing a Trojan horse executable file in one of these...

6.9

CVE-2012-1854

  • EPSS 0.65%
  • Published 10.07.2012 21:55:05
  • Last modified 11.04.2025 00:51:21

Untrusted search path vulnerability in VBE6.dll in Microsoft Office 2003 SP3, 2007 SP2 and SP3, and 2010 Gold and SP1; Microsoft Visual Basic for Applications (VBA); and Summit Microsoft Visual Basic for Applications SDK allows local users to gain pr...

9.3

CVE-2012-0141

  • EPSS 64.17%
  • Published 09.05.2012 00:55:01
  • Last modified 11.04.2025 00:51:21

Microsoft Excel 2003 SP3, 2007 SP2 and SP3, and 2010 Gold and SP1; Office 2011 for Mac; Excel Viewer; and Office Compatibility Pack SP2 and SP3 do not properly handle memory during the opening of files, which allows remote attackers to execute arbitr...

9.3

CVE-2012-0142

  • EPSS 62.11%
  • Published 09.05.2012 00:55:01
  • Last modified 11.04.2025 00:51:21

Microsoft Excel 2003 SP3, 2007 SP2 and SP3, and 2010 Gold and SP1; Office 2008 for Mac; Excel Viewer; and Office Compatibility Pack SP2 and SP3 do not properly handle memory during the opening of files, which allows remote attackers to execute arbitr...

9.3

CVE-2012-0143

  • EPSS 60.56%
  • Published 09.05.2012 00:55:01
  • Last modified 11.04.2025 00:51:21

Microsoft Excel 2003 SP3 and Office 2008 for Mac do not properly handle memory during the opening of files, which allows remote attackers to execute arbitrary code via a crafted spreadsheet, aka "Excel Memory Corruption Using Various Modified Bytes V...

9.3

CVE-2012-0159

  • EPSS 69.52%
  • Published 09.05.2012 00:55:01
  • Last modified 11.04.2025 00:51:21

Microsoft Windows XP SP2 and SP3, Windows Server 2003 SP2, Windows Vista SP2, Windows Server 2008 SP2, R2, and R2 SP1, Windows 7 Gold and SP1, and Windows 8 Consumer Preview; Office 2003 SP3, 2007 SP2 and SP3, and 2010 Gold and SP1; Silverlight 4 bef...

9.3

CVE-2012-0165

  • EPSS 62.11%
  • Published 09.05.2012 00:55:01
  • Last modified 11.04.2025 00:51:21

GDI+ in Microsoft Windows Vista SP2 and Server 2008 SP2 and Office 2003 SP3, 2007 SP2 and SP3, and 2010 Gold and SP1 does not properly validate record types in EMF images, which allows remote attackers to execute arbitrary code via a crafted image, a...