This script is Copyright (C) 2005-2016 Tenable Network Security, Inc.
Arbitrary code can be executed on the remote host through the Office
The remote host is running a version of Microsoft Office that could
allow an attacker to execute arbitrary code on the remote host.
To exploit this flaw, an attacker would need to send a specially
crafted file to a user on the remote host and wait for him to open it
using Microsoft Office.
When opening the malformed file, Microsoft Office will encounter a
buffer overflow which may be exploited to execute arbitrary code.
See also :
Microsoft has released a patch for Office XP.
Risk factor :
High / CVSS Base Score : 7.2
CVSS Temporal Score : 6.8
Public Exploit Available : true
Family: Windows : Microsoft Bulletins
Nessus Plugin ID: 16332 ()
Bugtraq ID: 12480
CVE ID: CVE-2004-0848
The cookie settings on this website are set to 'allow all cookies' to give you the very best website experience. If you continue without changing these settings, you consent to this - but if you want, you can opt out of all cookies by clicking below.