Sploitus

8 exploited vulnerabilities in Office Xp

Vulnerabilities with publicly known exploits

Vendors
Microsoft
With known exploits
8
Affected Microsoft Isa Server versions
= 2004, 2006
Affected Microsoft Office versions
All versions
Affected Microsoft Office Web Components versions
= 2000, 2003, xp
Affected Microsoft Office Xp versions
= SP3
Affected Microsoft Digital Image Suite versions
= 2006
Affected Microsoft Forefront Client Security versions
= 1.0
Affected Microsoft Office Powerpoint Viewer versions
= 2003
Affected Microsoft Report Viewer versions
= 2005, 2008

Vulnerabilities with exploits

Highest CVSS first — 7 of these already have exploit code on Sploitus

CVE-2009-1534 8 exploits
CVSS 9.3 HIGH 2009-08-12FIX AVAILABLE
Microsoft OWC Spreadsheet - HTMLURL Buffer Overflow (MS09-043) (Metasploit)Microsoft OWC Spreadsheet HTMLURL Buffer Overflow
CVE-2009-1136 11 exploits
CVSS 9.3 HIGH 2009-07-15FIX AVAILABLE
Microsoft Office Web Components (OWC) Spreadsheet - msDataSourceObject Memory Corruption (MS09-043) (Metasploit)Microsoft OWC Spreadsheet msDataSourceObject Memory Corruption
CVE-2008-3015 1 exploit
CVSS 9.3 HIGH 2008-09-10FIX AVAILABLE
Microsoft GDI+ BMP整数溢出漏洞（MS08-052）
CVE-2008-3013 2 exploits
CVSS 9.3 HIGH 2008-09-10FIX AVAILABLE
Microsoft Windows - GDI+ (PoC) (MS08-052) (2)Microsoft GDI+ GIF文件远程代码执行漏洞（MS08-052）
CVE-2008-0118 7 exploits
CVSS 9.3 HIGH 2008-03-11FIX AVAILABLE
Microsoft Office Drawing Shapes memory corruption vulnerabilityMicrosoft Office Drawing Shapes memory corruption vulnerability
CVE-2007-5348 2 exploits
CVSS 9.3 HIGH 2008-09-10FIX AVAILABLE
Microsoft Internet Explorer - GDI+ (PoC) (MS08-052)Microsoft GDI+ VML基于堆的缓冲区溢出漏洞（MS08-052）
CVE-2006-2389 6 exploits
CVSS 9.3 HIGH 2006-07-11FIX AVAILABLE
Microsoft Office 2000/2002 Property Code Execution VulnerabilityMicrosoft Office Property Code Execution exploit (CVE-2006-2389)
CVE-2002-1716
CVSS 5.0 MEDIUM 2002-12-31FIX AVAILABLE