CVEDB API

Vulnerabilities

Vulnerable Software

Vulnerability Details CVE-2004-0848

Buffer overflow in Microsoft Office XP allows remote attackers to execute arbitrary code via a link with a URL file location containing long inputs after (1) "%00 (null byte) in .doc filenames or (2) "%0a" (carriage return) in .rtf filenames.

Exploit prediction scoring system (EPSS) score

EPSS Score 0.373

EPSS Ranking 96.9%

CVSS Severity

CVSS v2 Score 7.5

References

Products affected by CVE-2004-0848

Microsoft » Office » Version: N/A

cpe:2.3:a:microsoft:office:-
Microsoft » Office » Version: 16.0.14326.21330

cpe:2.3:a:microsoft:office:16.0.14326.21330
Microsoft » Office » Version: 16.0.14326.21606

cpe:2.3:a:microsoft:office:16.0.14326.21606
Microsoft » Office » Version: 16.0.16026.20172

cpe:2.3:a:microsoft:office:16.0.16026.20172
Microsoft » Office » Version: 16.0.16130.20156

cpe:2.3:a:microsoft:office:16.0.16130.20156
Microsoft » Office » Version: 16.0.16827.20138

cpe:2.3:a:microsoft:office:16.0.16827.20138
Microsoft » Office » Version: 2.70.23021003

cpe:2.3:a:microsoft:office:2.70.23021003
Microsoft » Office » Version: 2000

cpe:2.3:a:microsoft:office:2000
Microsoft » Office » Version: 2001

cpe:2.3:a:microsoft:office:2001
Microsoft » Office » Version: 2002

cpe:2.3:a:microsoft:office:2002
Microsoft » Office » Version: 2003

cpe:2.3:a:microsoft:office:2003
Microsoft » Office » Version: 2004

cpe:2.3:a:microsoft:office:2004
Microsoft » Office » Version: 2007

cpe:2.3:a:microsoft:office:2007
Microsoft » Office » Version: 2008

cpe:2.3:a:microsoft:office:2008
Microsoft » Office » Version: 2010

cpe:2.3:a:microsoft:office:2010
Microsoft » Office » Version: 2011

cpe:2.3:a:microsoft:office:2011
Microsoft » Office » Version: 2013

cpe:2.3:a:microsoft:office:2013
Microsoft » Office » Version: 2013_rt

cpe:2.3:a:microsoft:office:2013_rt
Microsoft » Office » Version: 2016

cpe:2.3:a:microsoft:office:2016
Microsoft » Office » Version: 2019

cpe:2.3:a:microsoft:office:2019
Microsoft » Office » Version: 2021

cpe:2.3:a:microsoft:office:2021
Microsoft » Office » Version: 3.0

cpe:2.3:a:microsoft:office:3.0
Microsoft » Office » Version: 4.0

cpe:2.3:a:microsoft:office:4.0
Microsoft » Office » Version: 4.3

cpe:2.3:a:microsoft:office:4.3
Microsoft » Office » Version: 95

cpe:2.3:a:microsoft:office:95
Microsoft » Office » Version: 97

cpe:2.3:a:microsoft:office:97
Microsoft » Office » Version: 98

cpe:2.3:a:microsoft:office:98
Microsoft » Office » Version: xp

cpe:2.3:a:microsoft:office:xp
Microsoft » Powerpoint » Version: 2002

cpe:2.3:a:microsoft:powerpoint:2002
Microsoft » Project » Version: 2002

cpe:2.3:a:microsoft:project:2002
Microsoft » Visio » Version: 2002

cpe:2.3:a:microsoft:visio:2002
Microsoft » Word » Version: 2002

cpe:2.3:a:microsoft:word:2002
Microsoft » Works » Version: 2002

cpe:2.3:a:microsoft:works:2002
Microsoft » Works » Version: 2003

cpe:2.3:a:microsoft:works:2003
Microsoft » Works » Version: 2004

cpe:2.3:a:microsoft:works:2004

Vulnerabilities

Vulnerable Software

Vulnerability Details CVE-2004-0848

Products

Pricing

Contact Us