Office

DATE	CVE	VULNERABILITY TITLE	RISK
2004-09-28	CVE-2004-0573	Unspecified vulnerability in Microsoft products Buffer overflow in the converter for Microsoft WordPerfect 5.x on Office 2000, Office XP, Office 2003, and Works Suites 2001 through 2004 allows remote attackers to execute arbitrary code via a malicious document or website. network low complexity microsoft	7.5
2004-09-28	CVE-2004-0200	Unspecified vulnerability in Microsoft products Buffer overflow in the JPEG (JPG) parsing engine in the Microsoft Graphic Device Interface Plus (GDI+) component, GDIPlus.dll, allows remote attackers to execute arbitrary code via a JPEG image with a small JPEG COM field length that is normalized to a large integer length before a memory copy operation. network microsoft critical	9.3
2003-10-20	CVE-2003-0347	Buffer Overrun vulnerability in Microsoft Visual Basic For Applications Document Handling Heap-based buffer overflow in VBE.DLL and VBE6.DLL of Microsoft Visual Basic for Applications (VBA) SDK 5.0 through 6.3 allows remote attackers to execute arbitrary code via a document with a long ID parameter. network low complexity microsoft critical	10.0
2002-08-12	CVE-2002-0619	Unspecified vulnerability in Microsoft Office 2000/Xp The Mail Merge Tool in Microsoft Word 2002 for Windows, when Microsoft Access is present on a system, allows remote attackers to execute Visual Basic (VBA) scripts within a mail merge document that is saved in HTML format, aka a "Variant of MS00-071, Word Mail Merge Vulnerability" (CVE-2000-0788). network low complexity microsoft	7.5
2002-08-12	CVE-2002-0617	Unspecified vulnerability in Microsoft Excel and Office The Macro Security Model in Microsoft Excel 2000 and 2002 for Windows allows remote attackers to execute code by creating a hyperlink on a drawing shape in a source workbook that points to a destination workbook containing an autoexecute macro, aka "Hyperlinked Excel Workbook Macro Bypass." network high complexity microsoft	5.1
2002-08-12	CVE-2002-0616	Unspecified vulnerability in Microsoft Excel and Office The Macro Security Model in Microsoft Excel 2000 and 2002 for Windows allows remote attackers to execute code by attaching an inline macro to an object within an Excel workbook, aka the "Excel Inline Macros Vulnerability." network high complexity microsoft	5.1
2002-07-03	CVE-2002-0615	Unspecified vulnerability in Microsoft Excel and Office The Windows Media Active Playlist in Microsoft Windows Media Player 7.1 stores information in a well known location on the local file system, allowing attackers to execute HTML scripts in the Local Computer zone, aka "Media Playback Script Invocation". network low complexity microsoft	7.5
2002-04-22	CVE-2002-0152	Buffer Overflow vulnerability in Multiple Microsoft Products for MacOS File URL Buffer overflow in various Microsoft applications for Macintosh allows remote attackers to cause a denial of service (crash) or execute arbitrary code by invoking the file:// directive with a large number of / characters, which affects Internet Explorer 5.1, Outlook Express 5.0 through 5.0.2, Entourage v. network low complexity microsoft	7.5
2002-03-08	CVE-2002-0021	Denial of Service vulnerability in Microsoft Office V.X Network Product Identification (PID) Checker in Microsoft Office v. network low complexity microsoft	5.0
2001-02-12	CVE-2001-0003	Unspecified vulnerability in Microsoft products Web Extender Client (WEC) in Microsoft Office 2000, Windows 2000, and Windows Me does not properly process Internet Explorer security settings for NTLM authentication, which allows attackers to obtain NTLM credentials and possibly obtain the password, aka the "Web Client NTLM Authentication" vulnerability. network low complexity microsoft	5.0