Vulnerabilities > Microsoft > Critical

DATE CVE VULNERABILITY TITLE RISK
2013-05-15 CVE-2013-1335 Code Injection vulnerability in Microsoft Word and Word Viewer
Microsoft Word 2003 SP3 and Word Viewer allow remote attackers to execute arbitrary code via crafted shape data in a Word document, aka "Word Shape Corruption Vulnerability."
network
microsoft CWE-94
critical
9.3
2013-05-15 CVE-2013-1329 Numeric Errors vulnerability in Microsoft Publisher 2003
Integer signedness error in Microsoft Publisher 2003 SP3 allows remote attackers to execute arbitrary code via a crafted Publisher file that triggers a buffer underflow, aka "Publisher Buffer Underflow Vulnerability."
network
microsoft CWE-189
critical
9.3
2013-05-15 CVE-2013-1328 Remote Code Execution vulnerability in Microsoft Publisher 2003/2007/2010
Microsoft Publisher 2003 SP3, 2007 SP3, and 2010 SP1 allows remote attackers to execute arbitrary code via a crafted Publisher file that triggers incorrect pointer handling, aka "Publisher Pointer Handling Vulnerability."
network
microsoft
critical
9.3
2013-05-15 CVE-2013-1327 Numeric Errors vulnerability in Microsoft Publisher 2003
Integer signedness error in Microsoft Publisher 2003 SP3 allows remote attackers to execute arbitrary code via a crafted Publisher file that triggers an improper memory allocation, aka "Publisher Signed Integer Vulnerability."
network
microsoft CWE-189
critical
9.3
2013-05-15 CVE-2013-1323 Code Injection vulnerability in Microsoft Publisher 2003
Microsoft Publisher 2003 SP3 does not properly handle NULL values for unspecified data items, which allows remote attackers to execute arbitrary code via a crafted Publisher file, aka "Publisher Incorrect NULL Value Handling Vulnerability."
network
microsoft CWE-94
critical
9.3
2013-05-15 CVE-2013-1322 Remote Code Execution vulnerability in Microsoft Publisher 2003
Microsoft Publisher 2003 SP3 does not properly check table range data, which allows remote attackers to execute arbitrary code via a crafted Publisher file, aka "Publisher Invalid Range Check Vulnerability."
network
low complexity
microsoft
critical
10.0
2013-05-15 CVE-2013-1321 Improper Input Validation vulnerability in Microsoft Publisher 2003
Microsoft Publisher 2003 SP3 does not properly check the data type of an unspecified return value, which allows remote attackers to execute arbitrary code via a crafted Publisher file, aka "Publisher Return Value Validation Vulnerability."
network
microsoft CWE-20
critical
9.3
2013-05-15 CVE-2013-1320 Buffer Errors vulnerability in Microsoft Publisher 2003
Buffer overflow in Microsoft Publisher 2003 SP3 allows remote attackers to execute arbitrary code via a crafted Publisher file, aka "Publisher Buffer Overflow Vulnerability."
network
low complexity
microsoft CWE-119
critical
10.0
2013-05-15 CVE-2013-1319 Remote Code Execution vulnerability in Microsoft Publisher 2003
Microsoft Publisher 2003 SP3 does not properly check the return value of an unspecified method, which allows remote attackers to execute arbitrary code via a crafted Publisher file, aka "Publisher Return Value Handling Vulnerability."
network
low complexity
microsoft
critical
10.0
2013-05-15 CVE-2013-1318 Improper Input Validation vulnerability in Microsoft Publisher 2003
Microsoft Publisher 2003 SP3 allows remote attackers to execute arbitrary code via a crafted Publisher file that triggers access to an invalid pointer, aka "Publisher Corrupt Interface Pointer Vulnerability."
network
low complexity
microsoft CWE-20
critical
10.0