Unscored CVE-2004-0848 EUVD-2004-0846GHSA-7xq5-jxmg-7hjc

Buffer overflow in Microsoft Office XP allows remote attackers to execute arbitrary code via a link with a URL file location containing lon…

Published Feb 8, 2005 · Updated Aug 8, 2024 · Assigned by mitre

Description

Buffer overflow in Microsoft Office XP allows remote attackers to execute arbitrary code via a link with a URL file location containing long inputs after (1) "%00 (null byte) in .doc filenames or (2) "%0a" (carriage return) in .rtf filenames.

References

VU#416001 third-party-advisory
MS05-005 vendor-advisory
oval:org.mitre.oval:def:2738 vdb-entry signature
oval:org.mitre.oval:def:2348 vdb-entry signature
TA05-039A third-party-advisory
oval:org.mitre.oval:def:4022 vdb-entry signature
ms-url-bo(19107) vdb-entry