Microsoft

Office

1007 Schwachstellen gefunden.

Hinweis: Diese Liste kann unvollständig sein. Daten werden ohne Gewähr im Ursprungsformat bereitgestellt.
9.3

CVE-2008-3460

  • EPSS 54.91%
  • Veröffentlicht 12.08.2008 23:41:00
  • Zuletzt bearbeitet 09.04.2025 00:30:58

WPGIMP32.FLT in Microsoft Office 2000 SP3, XP SP3, and 2003 SP2; Office Converter Pack; and Works 8 does not properly parse the length of a WordPerfect Graphics (WPG) file, which allows remote attackers to execute arbitrary code via a crafted WPG fil...

7.5

CVE-2008-3068

  • EPSS 12.63%
  • Veröffentlicht 07.07.2008 23:41:00
  • Zuletzt bearbeitet 09.04.2025 00:30:58

Microsoft Crypto API 5.131.2600.2180 through 6.0, as used in Outlook, Windows Live Mail, and Office 2007, performs Certificate Revocation List (CRL) checks by using an arbitrary URL from a certificate embedded in a (1) S/MIME e-mail message or (2) si...

9.3

CVE-2008-0119

  • EPSS 55.86%
  • Veröffentlicht 13.05.2008 22:20:00
  • Zuletzt bearbeitet 09.04.2025 00:30:58

Unspecified vulnerability in Microsoft Publisher in Office 2000 and XP SP3, 2003 SP2 and SP3, and 2007 SP1 and earlier allows remote attackers to execute arbitrary code via a Publisher file with crafted object header data that triggers memory corrupt...

9.3

CVE-2008-1091

  • EPSS 64.11%
  • Veröffentlicht 13.05.2008 22:20:00
  • Zuletzt bearbeitet 09.04.2025 00:30:58

Unspecified vulnerability in Microsoft Word in Office 2000 and XP SP3, 2003 SP2 and SP3, and 2007 Office System SP1 and earlier allows remote attackers to execute arbitrary code via a Rich Text Format (.rtf) file with a malformed string that triggers...

9.3

CVE-2008-1434

  • EPSS 54.91%
  • Veröffentlicht 13.05.2008 22:20:00
  • Zuletzt bearbeitet 09.04.2025 00:30:58

Use-after-free vulnerability in Microsoft Word in Office 2000 and XP SP3, 2003 SP2 and SP3, and 2007 Office System SP1 and earlier allows remote attackers to execute arbitrary code via an HTML document with a large number of Cascading Style Sheets (C...

9.3

CVE-2008-1898

Exploit
  • EPSS 77.39%
  • Veröffentlicht 21.04.2008 17:05:00
  • Zuletzt bearbeitet 09.04.2025 00:30:58

A certain ActiveX control in WkImgSrv.dll 7.03.0616.0, as distributed in Microsoft Works 7 and Microsoft Office 2003 and 2007, allows remote attackers to execute arbitrary code or cause a denial of service (browser crash) via an invalid WksPictureInt...

9.3

CVE-2008-1089

  • EPSS 50.85%
  • Veröffentlicht 08.04.2008 23:05:00
  • Zuletzt bearbeitet 09.04.2025 00:30:58

Unspecified vulnerability in Microsoft Visio 2002 SP2, 2003 SP2 and SP3, and 2007 up to SP1 allows user-assisted remote attackers to execute arbitrary code via a Visio file containing crafted object header data, aka "Visio Object Header Vulnerability...

9.3

CVE-2008-1090

  • EPSS 59.44%
  • Veröffentlicht 08.04.2008 23:05:00
  • Zuletzt bearbeitet 09.04.2025 00:30:58

Unspecified vulnerability in Microsoft Visio 2002 SP2, 2003 SP2 and SP3, and 2007 up to SP1 allows user-assisted remote attackers to execute arbitrary code via a crafted .DXF file, aka "Visio Memory Validation Vulnerability."

9.3

CVE-2007-1201

  • EPSS 45.72%
  • Veröffentlicht 11.03.2008 23:44:00
  • Zuletzt bearbeitet 09.04.2025 00:30:58

Unspecified vulnerability in certain COM objects in Microsoft Office Web Components 2000 allows user-assisted remote attackers to execute arbitrary code via vectors related to DataSource that trigger memory corruption, aka "Office Web Components Data...

9.3

CVE-2008-0110

  • EPSS 53.02%
  • Veröffentlicht 11.03.2008 23:44:00
  • Zuletzt bearbeitet 09.04.2025 00:30:58

Unspecified vulnerability in Microsoft Outlook in Office 2000 SP3, XP SP3, 2003 SP2 and Sp3, and Office System allows user-assisted remote attackers to execute arbitrary code via a crafted mailto URI.