High

DATE	CVE	VULNERABILITY TITLE	RISK
2006-06-13	CVE-2006-0022	Remote Code Execution vulnerability in Microsoft PowerPoint Malformed Record Unspecified vulnerability in Microsoft PowerPoint in Microsoft Office 2000 SP3, Office XP SP3, Office 2003 SP1 and SP2, Office 2004 for Mac, and v. network high complexity microsoft	7.6
2005-02-08	CVE-2004-0848	Unspecified vulnerability in Microsoft products Buffer overflow in Microsoft Office XP allows remote attackers to execute arbitrary code via a link with a URL file location containing long inputs after (1) "%00 (null byte) in .doc filenames or (2) "%0a" (carriage return) in .rtf filenames. network low complexity microsoft	7.5
2002-04-22	CVE-2002-0152	Buffer Overflow vulnerability in Multiple Microsoft Products for MacOS File URL Buffer overflow in various Microsoft applications for Macintosh allows remote attackers to cause a denial of service (crash) or execute arbitrary code by invoking the file:// directive with a large number of / characters, which affects Internet Explorer 5.1, Outlook Express 5.0 through 5.0.2, Entourage v. network low complexity microsoft	7.5
2001-10-30	CVE-2001-0718	Unspecified vulnerability in Microsoft Excel and Powerpoint Vulnerability in (1) Microsoft Excel 2002 and earlier and (2) Microsoft PowerPoint 2002 and earlier allows attackers to bypass macro restrictions and execute arbitrary commands by modifying the data stream in the document. network low complexity microsoft	7.5
2000-05-11	CVE-2000-0419	Unspecified vulnerability in Microsoft products The Office 2000 UA ActiveX Control is marked as "safe for scripting," which allows remote attackers to conduct unauthorized activities via the "Show Me" function in Office Help, aka the "Office 2000 UA Control" vulnerability. network low complexity microsoft	7.5
2000-01-20	CVE-2000-0088	Unspecified vulnerability in Microsoft products Buffer overflow in the conversion utilities for Japanese, Korean and Chinese Word 5 documents allows an attacker to execute commands, aka the "Malformed Conversion Data" vulnerability. local low complexity microsoft	7.2
1999-12-31	CVE-1999-1474	Unspecified vulnerability in Microsoft Powerpoint 95/97 PowerPoint 95 and 97 allows remote attackers to cause an application to be run automatically without prompting the user, possibly through the slide show, when the document is opened in browsers such as Internet Explorer. network low complexity microsoft	7.5