Sébastien Morin

The issue is caused by a buffer overflow in Microsoft Office software, including Word Viewer and Microsoft Word, allowing a remote attacker to execute arbitrary code using a specially crafted file. Multiple remote code execution vulnerabilities exist due to the software's failure to properly handle objects in memory. Successful exploitation could allow an attacker to run arbitrary code in the context of the current user, potentially taking control of the affected system if the user has administrative rights. This could enable the attacker to install programs, view, change, or delete data, or create new accounts with full user rights.

The issue is caused by a buffer overflow in memory, allowing a remote attacker to potentially execute arbitrary code or cause a denial of service (memory corruption).

The issue is caused by a buffer overflow in memory, allowing a remote attacker to potentially execute arbitrary code or cause a denial of service (memory corruption).

The issue is caused by a buffer overflow, allowing a remote attacker to execute arbitrary code or cause a denial of service (memory corruption).

The issue is caused by a buffer overflow, allowing a remote attacker to execute arbitrary code or cause a denial of service (memory corruption).

The issue is caused by a buffer overflow, allowing a remote attacker to execute arbitrary code or cause a denial of service (memory corruption).

The issue is caused by a buffer overflow, allowing a remote attacker to execute arbitrary code or cause a denial of service (memory corruption).

The issue is caused by a buffer overflow, allowing a remote attacker to execute arbitrary code or cause a denial of service (memory corruption).

The issue is caused by a buffer overflow, allowing a remote attacker to execute arbitrary code or cause a denial of service (memory corruption).

The issue is caused by a buffer overflow, allowing a remote attacker to execute arbitrary code or cause a denial of service (memory corruption).

The issue is caused by a buffer overflow. Exploitation of this issue may allow a remote attacker to execute arbitrary code using a specially crafted Office document. This can occur when the Office software fails to properly handle objects in memory. If successfully exploited, an attacker could run arbitrary code in the context of the current user. If the current user has administrative user rights, the attacker could take control of the affected system, install programs, view, change, or delete data, or create new accounts with full user rights.

The issue allows remote attackers to inject arbitrary web script or HTML. This can be achieved via the `cfg[projectName]` parameter to "index.php/admin/saveConfig", the `data[stats provider url]` parameter to "index.php/areas/saveArea", or the `data[description]` parameter to "index.php/areas/saveSection".