GCVE - cpe:2.3:a:microsoft:office:xp:sp2:*:*:*:*:*:*

Approved changes feed: RSS · Atom

cpe:2.3:a:microsoft:office:xp:sp2:*:*:*:*:*:*

part: a version: xp update: sp2

Vendor	Microsoft (`67206627-3ef6-5870-9d98-26a9f2e7065c`)
Product	Office (`500dd0f0-abf7-5a48-83ed-09faf7777559`)
Edition	*
Language	*
Software edition	*
Target software	*
Target hardware	*
Other	*
Notes	Imported from NVD CPE 2.0 feed

PURL mappings

PURL	Source	Last updated
No PURL mappings for this CPE yet.

Vulnerability references

Identifier	cpeApplicability	Submitted	db.gcve.eu details	Rationale
`CVE:CVE-2008-1090`	vulnerable	2026-06-08 04:50:18.868085	Details available Unspecified vulnerability in Microsoft Visio 2002 SP2, 2003 SP2 and SP3, and 2007 up to SP1 allows user-assisted remote attackers to execute arbitrary code via a crafted .DXF file, aka "Visio Memory Validation Vulnerability." Published: 2008-04-08T23:00:00.000Z Updated: 2024-08-07T08:08:57.553Z Open on db.gcve.eu Reference links http://www.securitytracker.com/id?1019804 http://www.us-cert.gov/cas/techalerts/TA08-099A.html http://marc.info/?l=bugtraq&m=120845064910729&w=2 http://www.vupen.com/english/advisories/2008/1143/references https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A5344	Imported from gcve-enriched-dumps CVE data
`CVE:CVE-2008-1089`	vulnerable	2026-06-08 04:50:18.864287	Details available Unspecified vulnerability in Microsoft Visio 2002 SP2, 2003 SP2 and SP3, and 2007 up to SP1 allows user-assisted remote attackers to execute arbitrary code via a Visio file containing crafted object header data, aka "Visio Object Header Vulnerability." Published: 2008-04-08T23:00:00.000Z Updated: 2024-08-07T08:08:57.602Z Open on db.gcve.eu Reference links http://www.securitytracker.com/id?1019804 http://www.us-cert.gov/cas/techalerts/TA08-099A.html http://marc.info/?l=bugtraq&m=120845064910729&w=2 http://www.vupen.com/english/advisories/2008/1143/references https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A5496	Imported from gcve-enriched-dumps CVE data
`CVE:CVE-2006-4694`	vulnerable	2026-06-08 04:49:18.571816	Details available Unspecified vulnerability in PowerPoint in Microsoft Office 2000, Office XP and Office 2003 allows user-assisted attackers to execute arbitrary code via a crafted record in a PPT file, as exploited by malware such as Exploit:Win32/Controlppt.W, Exploit:Win32/Controlppt.X, and Exploit-PPT.d/Trojan.PPDropper.F. NOTE: it has been reported that the attack vector involves SlideShowWindows.View.GotoNamedShow. Published: 2006-09-27T19:00:00.000Z Updated: 2024-08-07T19:23:41.084Z Open on db.gcve.eu Reference links http://www.osvdb.org/29259 http://www.vupen.com/english/advisories/2006/3794 http://www.us-cert.gov/cas/techalerts/TA06-283A.html http://www.securityfocus.com/archive/1/449179/100/0/threaded https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A269	Imported from gcve-enriched-dumps CVE data
`CVE:CVE-2006-3493`	vulnerable	2026-06-08 04:49:09.521384	Details available Buffer overflow in LsCreateLine function (mso_203) in mso.dll and mso9.dll, as used by Microsoft Word and possibly other products in Microsoft Office 2003, 2002, and 2000, allows remote user-assisted attackers to cause a denial of service (crash) via a crafted Word DOC or other Office file type. NOTE: this issue was originally reported to allow code execution, but on 20060710 Microsoft stated that code execution is not possible, and the original researcher agrees. Published: 2006-07-10T22:00:00.000Z Updated: 2024-08-07T18:30:33.996Z Open on db.gcve.eu Reference links http://www.securityfocus.com/bid/18905 http://www.securityfocus.com/archive/1/439649/100/0/threaded http://securitytracker.com/id?1016453 http://lists.grok.org.uk/pipermail/full-disclosure/2006-July/047732.html http://www.vupen.com/english/advisories/2006/2720	Imported from gcve-enriched-dumps CVE data
`CVE:CVE-2006-3435`	vulnerable	2026-06-08 04:49:09.306527	Details available PowerPoint in Microsoft Office 2000, XP, 2003, 2004 for Mac, and v.X for Mac does not properly parse the slide notes field in a document, which allows remote user-assisted attackers to execute arbitrary code via crafted data in this field, which triggers an erroneous object pointer calculation that uses data from within the document. NOTE: this issue is different than other PowerPoint vulnerabilities including CVE-2006-4694. Published: 2006-10-10T21:00:00.000Z Updated: 2024-08-07T18:30:33.898Z Open on db.gcve.eu Reference links http://www.kb.cert.org/vuls/id/187028 http://www.securityfocus.com/archive/1/449179/100/0/threaded http://www.zerodayinitiative.com/advisories/ZDI-06-032.html http://www.osvdb.org/29446 https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A476	Imported from gcve-enriched-dumps CVE data
`CVE:CVE-2006-1540`	vulnerable	2026-06-08 04:48:57.443397	db.gcve.eu details were skipped to keep the page responsive. Open on db.gcve.eu	Imported from gcve-enriched-dumps CVE data
`CVE:CVE-2005-2127`	vulnerable	2026-06-08 04:48:28.451586	db.gcve.eu details were skipped to keep the page responsive. Open on db.gcve.eu	Imported from gcve-enriched-dumps CVE data
`CVE:CVE-2004-0848`	vulnerable	2026-06-08 04:47:51.629736	db.gcve.eu details were skipped to keep the page responsive. Open on db.gcve.eu	Imported from gcve-enriched-dumps CVE data
`CVE:CVE-2004-0121`	vulnerable	2026-06-08 04:47:48.610907	db.gcve.eu details were skipped to keep the page responsive. Open on db.gcve.eu	Imported from gcve-enriched-dumps CVE data
`CVE:CVE-2003-0347`	vulnerable	2026-06-08 04:47:21.357501	db.gcve.eu details were skipped to keep the page responsive. Open on db.gcve.eu	Imported from gcve-enriched-dumps CVE data

Contribute

You can submit an edit proposal for this CPE entry or suggest a related product/vendor addition using the action button above.