CVE-2004-0573

Sažetak

Buffer overflow in the converter for Microsoft WordPerfect 5.x on Office 2000, Office XP, Office 2003, and Works Suites 2001 through 2004 allows remote attackers to execute arbitrary code via a malicious document or website.

Reference

http://marc.info/?l=bugtraq&m=109519646030906&w=2
http://secunia.com/advisories/12529
http://securitytracker.com/id?1011249
http://securitytracker.com/id?1011250
http://securitytracker.com/id?1011251
http://securitytracker.com/id?1011252
http://www.kb.cert.org/vuls/id/449438
https://docs.microsoft.com/en-us/security-updates/securitybulletins/2004/ms04-027
https://exchange.xforce.ibmcloud.com/vulnerabilities/17306
https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A2670
https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A3311
https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A3333
https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A4005
https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A5021

CVSS

Base:	7.5
Impact:	6.4
Exploitability:	10.0

Pristup

Vektor	Složenost	Autentikacija
NETWORK	LOW	NONE

Impact

Povjerljivost	Cjelovitost	Dostupnost
PARTIAL	PARTIAL	PARTIAL

CVSS vektor

AV:N/AC:L/Au:N/C:P/I:P/A:P

Zadnje važnije ažuriranje

30-10-2018 - 16:25

Objavljeno

28-09-2004 - 04:00