CVE-2004-0963
Get alerts for future matching vulnerabilitiesLog in to subscribe
I. Basic Information for CVE-2004-0963
Vulnerability Information
Have questions about the vulnerability? See if Shenlong's analysis helps!
View Shenlong Deep Dive ↗ Although we use advanced large model technology, its output may still contain inaccurate or outdated information.Shenlong tries to ensure data accuracy, but please verify and judge based on the actual situation.
Vulnerability Title
N/A
Source: NVD (National Vulnerability Database)
Vulnerability Description
Buffer overflow in Microsoft Word 2002 (10.6612.6714) SP3, and possibly other versions, allows remote attackers to cause a denial of service (application exception) and possibly execute arbitrary code in winword.exe via certain unexpected values in a .doc file, including (1) an offset that triggers an out-of-bounds memory access, (2) a certain value that causes a large memory copy as triggered by an integer conversion error, and other values.
Source: NVD (National Vulnerability Database)
CVSS Information
N/A
Source: NVD (National Vulnerability Database)
Vulnerability Type
N/A
Source: NVD (National Vulnerability Database)
Vulnerability Title
Microsoft Word文件解析溢出(MS05-023)
Source: CNNVD (China National Vulnerability Database)
Vulnerability Description
Microsoft Word是微软发布的非常流行的办公软件。 Microsoft Word中存在缓冲区溢出漏洞，起因是winword.exe在解析文档文件时缺少数据验证，这样就可能通过修改*.doc文件中的数据触发异常。 成功利用这个漏洞的攻击者可以完全控制受影响的系统，然后攻击者就可以安装程序，浏览，更改或删除数据，或创建拥有完全权限的新帐号。在系统中配置为较少权限的帐号比以管理权限操作用户所受威胁要小。
Source: CNNVD (China National Vulnerability Database)
CVSS Information
N/A
Source: CNNVD (China National Vulnerability Database)
Vulnerability Type
N/A
Source: CNNVD (China National Vulnerability Database)
Affected Products
| Vendor | Product | Affected Versions | CPE | Subscribe |
|---|---|---|---|---|
| - | n/a | n/a | - |
II. Public POCs for CVE-2004-0963
| # | POC Description | Source Link | Shenlong Link |
|---|
AI-Generated POCPremium
No public POC found.
Login to generate AI POCIII. Intelligence Information for CVE-2004-0963
请登录查看更多情报信息。
- https://docs.microsoft.com/en-us/security-updates/securitybulletins/2005/ms05-023vendor-advisoryx_refsource_MS
- https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A420vdb-entrysignaturex_refsource_OVAL
- https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A2105vdb-entrysignaturex_refsource_OVAL
- https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A1795vdb-entrysignaturex_refsource_OVAL
- https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A2216vdb-entrysignaturex_refsource_OVAL
- https://nvd.nist.gov/vuln/detail/CVE-2004-0963
Same Patch Batch · n/a · 2004-10-20 · 18 CVEs total
| CVE-2004-0968 | GNU GLibC以不安全方式创建临时文件漏洞 | |
| CVE-2004-0977 | PostgreSQL不安全临时文件创建漏洞 | |
| CVE-2004-0976 | Perl以安全方式创建临时文件漏洞 | |
| CVE-2004-0975 | OpenSSL DER_CHOP不安全临时文件创建漏洞 | |
| CVE-2004-0974 | NetaTalk未指定的不安全临时文件创建漏洞 | |
| CVE-2004-0972 | Trustix LVM实用程序未指定的不安全临时文件创建漏洞 | |
| CVE-2004-0971 | Trustix Secure Linux 安全漏洞 | |
| CVE-2004-0970 | GNU GZip未指定的不安全临时文件创建漏洞 | |
| CVE-2004-0969 | GNU Troff (Groff) Groffer脚本不安全临时文件创建漏洞 | |
| CVE-2001-1413 | Ncompress长文件名缓冲区溢出漏洞 | |
| CVE-2004-0967 | GhostScript不安全临时文件创建漏洞 | |
| CVE-2004-0966 | GNU GetText未指定的不安全临时文件创建漏洞 | |
| CVE-2004-0964 | Zinf形态异常的播放列表文件远程缓冲区溢出漏洞 | |
| CVE-2004-0961 | FreeRADIUS Access-Request packets远程拒绝服务漏洞 | |
| CVE-2004-0960 | FreeRADIUS 畸形VSA属性拒绝服务攻击 | |
| CVE-2004-0834 | Speedtouch USB驱动程序本地格式串漏洞 | |
| CVE-2004-0805 | mpg123远程缓冲区溢出漏洞 |
IV. Related Vulnerabilities
V. Comments for CVE-2004-0963
No comments yet