CVE-2004-0848

5 documents4 sources
Severity
7.5HIGH
EPSS
43.0%
top 2.51%
CISA KEV
Not in KEV
Exploit
No known exploits
Affected products
6
Microsoft OfficeMicrosoft PowerpointMicrosoft Project+3 more
Timeline
PublishedFeb 8
Latest updateApr 29

Description

Buffer overflow in Microsoft Office XP allows remote attackers to execute arbitrary code via a link with a URL file location containing long inputs after (1) "%00 (null byte) in .doc filenames or (2) "%0a" (carriage return) in .rtf filenames.

CVSS vector

AV:N/AC:L/C:P/I:P/A:PExploitability: 10.0 | Impact: 6.4

Affected Packages6 packages

▶NVDmicrosoft/word2002
▶NVDmicrosoft/visio2002
▶NVDmicrosoft/works2002, 2003, 2004+2

Patches

Patch: www.kb.cert.org ↗Patch: www.us-cert.gov ↗Patch: www.kb.cert.org ↗

🔴Vulnerability Details

2
GHSA
GHSA-7xq5-jxmg-7hjc: Buffer overflow in Microsoft Office XP allows remote attackers to execute arbitrary code via a link with a URL file location containing long inputs af↗2022-04-29
▶
CVEList
CVE-2004-0848: Buffer overflow in Microsoft Office XP allows remote attackers to execute arbitrary code via a link with a URL file location containing long inputs af↗2005-02-08
▶

💬Community

2
Bugzilla
CAN-2003-0848 slocate buffer overflow↗2004-01-21
▶
Bugzilla
CAN-2003-0848 slocate buffer overflow↗2004-01-21
▶
CVE-2004-0848 (HIGH CVSS 7.5) | Buffer overflow in Microsoft Office | cvebase.io