CVE-2004-0963
- State
- Published
- Severity
- Not scored
- Published
- Oct 20, 2004
- Updated
- Aug 8, 2024
- Reserved
- Oct 18, 2004
Description
Buffer overflow in Microsoft Word 2002 (10.6612.6714) SP3, and possibly other versions, allows remote attackers to cause a denial of service (application exception) and possibly execute arbitrary code in winword.exe via certain unexpected values in a .doc file, including (1) an offset that triggers an out-of-bounds memory access, (2) a certain value that causes a large memory copy as triggered by an integer conversion error, and other values.
Scores
The record has no CVSS score.
Weaknesses
The record names no weakness.
Affected Products
| Product | Versions |
|---|---|
n/an/a |
|
References
- MS05-023vendor-advisory
- oval:org.mitre.oval:def:2216vdb-entrysignature
- oval:org.mitre.oval:def:420vdb-entrysignature
- 20041006 [HV-HIGH] MS Word multiple exceptions, at least one exploitablemailing-list
- oval:org.mitre.oval:def:2105vdb-entrysignature
- oval:org.mitre.oval:def:1795vdb-entrysignature
- word-file-parsing-bo(17635)vdb-entry
Every record here comes from the CVE Program’s CVE List. © 1999–2026 The MITRE Corporation. CVE is a registered trademark of The MITRE Corporation. The records are reproduced under the CVE Program terms of use.