Office Word Viewer vulnerabilities | LiveThreat CVE Feed

Product

Office Word Viewer

by Microsoft · last CVE Jan 8, 2019

On CISA KEVExploited in the wild

CVEs

On KEV

8.8

Max CVSS

New 30D

Vulnerabilities42 In the news0 Timeline

Severity mix

Critical 0High 12Medium 6Low 1

Severity

All severities42 Critical0 High12 Medium6 Low1

Exploitation

On CISA KEV4 Exploited in the wild4

Watch

Add Office Word Viewer to your stack to get only the CVEs that touch what you run.

CVE	CVSS	EPSS	Published	Summary · affected versions
CVE-2019-0541 In wildKEV	8.8	53%	Jan 8	Microsoft MSHTML Remote Code Execution Vulnerability Affected: All versions, or not specified
CVE-2017-11826 In wildKEV	7.8	81%	Oct 13	Microsoft Office Remote Code Execution Vulnerability Affected: All versions, or not specified
CVE-2012-2539 In wildKEV	7.8	53%	Dec 12	Microsoft Word Remote Code Execution Vulnerability Affected: All versions, or not specified
CVE-2009-0563 In wildKEV	7.8	60%	Jun 10	Microsoft Office Buffer Overflow Vulnerability Affected: 2003
CVE-2019-0585	8.8	22%	Jan 8	A remote code execution vulnerability exists in Microsoft Word software when it fails to properly handle objects in memory, aka "Microsoft Word Remote Code Execution… Affected: All versions, or not specified
CVE-2018-0851	8.8	19%	Feb 15	Microsoft Office 2007 SP2, Microsoft Office Word Viewer, Microsoft Office 2010 SP2, Microsoft Office 2013 SP1 and RT SP1, Microsoft Office 2016, and Microsoft Office 2016… Affected: All versions, or not specified
CVE-2017-8682	8.8	50%	Sep 13	Windows graphics on Microsoft Windows Server 2008 SP2 and R2 SP1, Windows 7 SP1, Windows 8.1, Windows Server 2012 Gold and R2, Windows RT 8.1, Windows 10 Gold, 1511, 1607, and… Affected: All versions, or not specified
CVE-2017-0283	8.8	39%	Jun 15	Uniscribe in Windows Server 2008 SP2 and R2 SP1, Windows 7 SP1, Windows 8.1, Windows Server 2012 Gold and R2, Windows RT 8.1, Windows 10 Gold, 1511, 1607, Windows Server 2016,… Affected: All versions, or not specified
CVE-2009-2502	8.1	22%	Oct 14	Buffer overflow in GDI+ in Microsoft Internet Explorer 6 SP1, Windows XP SP2 and SP3, Office XP SP3, Office 2003 SP3, 2007 Microsoft Office System SP1 and SP2, Office Project 2002… Affected: All versions, or not specified
CVE-2018-8281	7.8	21%	Jul 11	A remote code execution vulnerability exists in Microsoft Office software when the software fails to properly handle objects in memory, aka "Microsoft Office Remote Code Execution… Affected: All versions, or not specified
CVE-2018-0922	7.8	18%	Mar 14	Microsoft Office 2010 SP2, 2013 SP1, and 2016, Microsoft Office 2016 Click-to-Run Microsoft Office 2016 for Mac, Microsoft Office Compatibility Pack SP2, Microsoft Office Web Apps… Affected: All versions, or not specified
CVE-2017-8696	7.5	14%	Sep 13	Windows Uniscribe in Microsoft Windows Server 2008 SP2 and R2 SP1; Windows 7 SP1; Office 2007 SP3; Office 2010 SP2; Word Viewer; Office for Mac 2011 and 2016; Skype for Business… Affected: All versions, or not specified
CVE-2018-8427	5.5	2%	Oct 10	An information disclosure vulnerability exists in the way that Microsoft Graphics Components handle objects in memory, aka "Microsoft Graphics Components Information Disclosure… Affected: All versions, or not specified
CVE-2018-8378	5.5	7%	Aug 15	An information disclosure vulnerability exists when Microsoft Office software reads out of bound memory due to an uninitialized variable, which could disclose the contents of… Affected: All versions, or not specified
CVE-2017-0060	5.5	16%	Mar 17	The Graphics Device Interface (GDI) in Microsoft Windows Vista SP2; Windows Server 2008 SP2 and R2 SP1; Windows 7 SP1; Windows 8.1; Windows Server 2012 Gold and R2; Windows RT… Affected: All versions, or not specified
CVE-2017-8695	5.3	10%	Sep 13	Windows Uniscribe in Microsoft Windows Server 2008 SP2 and R2 SP1; Windows 7 SP1; Windows 8.1; Windows Server 2012 Gold and R2; Windows RT 8.1; Windows 10 Gold, 1511, 1607, 1703,… Affected: All versions, or not specified
CVE-2017-0285	5.0	3%	Jun 15	Uniscribe in Windows Server 2008 SP2 and R2 SP1, Windows 7 SP1, Windows 8.1, Windows Server 2012 Gold and R2, Windows RT 8.1, Windows 10 Gold, 1511, 1607, 1703, Windows Server… Affected: All versions, or not specified
CVE-2017-0073	4.3	33%	Mar 17	The Graphics Device Interface (GDI) in Microsoft Windows Vista SP2; Windows Server 2008 SP2 and R2 SP1; Windows 7 SP1; Windows 8.1; Windows Server 2012 Gold and R2; Windows RT… Affected: All versions, or not specified
CVE-2017-8676	3.3	14%	Sep 13	The Windows Graphics Device Interface (GDI) in Microsoft Windows Server 2008 SP2 and R2 SP1; Windows 7 SP1; Windows 8.1; Windows Server 2012 Gold and R2; Windows RT 8.1; Windows… Affected: All versions, or not specified
CVE-2014-6335	–	16%	Nov 11	Microsoft Word 2007 SP3, Word Viewer, and Office Compatibility Pack SP3 allow remote attackers to execute arbitrary code or cause a denial of service (memory corruption) via a… Affected: All versions, or not specified
CVE-2014-6334	–	17%	Nov 11	Microsoft Word 2007 SP3, Word Viewer, and Office Compatibility Pack SP3 allow remote attackers to execute arbitrary code or cause a denial of service (memory corruption) via a… Affected: All versions, or not specified
CVE-2014-6333	–	18%	Nov 11	Microsoft Word 2007 SP3, Word Viewer, and Office Compatibility Pack SP3 allow remote attackers to execute arbitrary code via a crafted Office document, aka "Microsoft Office… Affected: All versions, or not specified
CVE-2010-1903	–	19%	Aug 11	Microsoft Office Word 2002 SP3 and 2003 SP3, and Office Word Viewer, allows remote attackers to execute arbitrary code or cause a denial of service (memory corruption) via a… Affected: All versions, or not specified
CVE-2010-1902	–	23%	Aug 11	Buffer overflow in Microsoft Office Word 2002 SP3, 2003 SP3, and 2007 SP2; Microsoft Office 2004 and 2008 for Mac; Open XML File Format Converter for Mac; Office Word Viewer; and… Affected: All versions, or not specified
CVE-2010-1901	–	19%	Aug 11	Microsoft Office Word 2002 SP3, 2003 SP3, and 2007 SP2; Microsoft Office 2004 and 2008 for Mac; Open XML File Format Converter for Mac; Office Word Viewer; and Office… Affected: All versions, or not specified
CVE-2010-1900	–	40%	Aug 11	Microsoft Office Word 2002 SP3, 2003 SP3, and 2007 SP2; Microsoft Office 2004 and 2008 for Mac; Open XML File Format Converter for Mac; Office Word Viewer; Office Compatibility… Affected: All versions, or not specified
CVE-2009-3135	–	36%	Nov 11	Stack-based buffer overflow in Microsoft Office Word 2002 SP3 and 2003 SP3, Office 2004 and 2008 for Mac, Open XML File Format Converter for Mac, Office Word Viewer 2003 SP3, and… Affected: 2003
CVE-2009-3126	–	23%	Oct 14	Integer overflow in GDI+ in Microsoft Internet Explorer 6 SP1, Windows XP SP2 and SP3, Office XP SP3, Office 2003 SP3, 2007 Microsoft Office System SP1 and SP2, Office Project… Affected: All versions, or not specified
CVE-2009-2528	–	20%	Oct 14	GDI+ in Microsoft Office XP SP3 does not properly handle malformed objects in Office Art Property Tables, which allows remote attackers to execute arbitrary code via a crafted… Affected: All versions, or not specified
CVE-2009-2504	–	21%	Oct 14	Multiple integer overflows in unspecified APIs in GDI+ in Microsoft .NET Framework 1.1 SP1, .NET Framework 2.0 SP1 and SP2, Windows XP SP2 and SP3, Windows Server 2003 SP2, Vista… Affected: All versions, or not specified
CVE-2009-2503	–	22%	Oct 14	GDI+ in Microsoft Internet Explorer 6 SP1, Windows XP SP2 and SP3, Windows Server 2003 SP2, Office XP SP3, Office 2003 SP3, 2007 Microsoft Office System SP1 and SP2, Office… Affected: All versions, or not specified
CVE-2009-2501	–	27%	Oct 14	Heap-based buffer overflow in GDI+ in Microsoft Internet Explorer 6 SP1, Windows XP SP2 and SP3, Office XP SP3, Office 2003 SP3, 2007 Microsoft Office System SP1 and SP2, Office… Affected: All versions, or not specified
CVE-2009-2500	–	24%	Oct 14	Integer overflow in GDI+ in Microsoft Internet Explorer 6 SP1, Windows XP SP2 and SP3, Office XP SP3, Office 2003 SP3, 2007 Microsoft Office System SP1 and SP2, Office Project… Affected: All versions, or not specified
CVE-2009-0565	–	41%	Jun 10	Buffer overflow in Microsoft Office Word 2000 SP3, 2002 SP3, and 2007 SP1 and SP2; Microsoft Office for Mac 2004 and 2008; Open XML File Format Converter for Mac; and Microsoft… Affected: 2003
CVE-2008-4837	–	37%	Dec 10	Stack-based buffer overflow in Microsoft Office Word 2000 SP3, 2002 SP3, 2003 SP3, and 2007 Gold and SP1; Word Viewer 2003 Gold and SP3; Office Compatibility Pack for Word, Excel,… Affected: 2003; 2003
CVE-2008-4031	–	23%	Dec 10	Microsoft Office Word 2000 SP3, 2002 SP3, 2003 SP3, and 2007 Gold and SP1; Outlook 2007 Gold and SP1; Word Viewer 2003 Gold and SP3; Office Compatibility Pack for Word, Excel, and… Affected: 2003; 2003
CVE-2008-4030	–	23%	Dec 10	Microsoft Office Word 2000 SP3, 2002 SP3, 2003 SP3, and 2007 Gold and SP1; Outlook 2007 Gold and SP1; Word Viewer 2003 Gold and SP3; and Office Compatibility Pack for Word, Excel,… Affected: 2003; 2003
CVE-2008-4028	–	38%	Dec 10	Microsoft Office Word 2000 SP3, 2002 SP3, 2003 SP3, and 2007 Gold and SP1; Outlook 2007 Gold and SP1; Word Viewer 2003 Gold and SP3; Office Compatibility Pack for Word, Excel, and… Affected: 2003; 2003
CVE-2008-4027	–	34%	Dec 10	Double free vulnerability in Microsoft Office Word 2000 SP3, 2002 SP3, 2003 SP3, and 2007 Gold and SP1; Outlook 2007 Gold and SP1; Word Viewer 2003 Gold and SP3; Office… Affected: 2003; 2003
CVE-2008-4026	–	23%	Dec 10	Microsoft Office Word 2000 SP3, 2002 SP3, 2003 SP3, and 2007 Gold and SP1; Word Viewer 2003 Gold and SP3; Office Compatibility Pack for Word, Excel, and PowerPoint 2007 File… Affected: 2003; 2003
CVE-2008-4025	–	33%	Dec 10	Integer overflow in Microsoft Office Word 2000 SP3, 2002 SP3, 2003 SP3, and 2007 Gold and SP1; Outlook 2007 Gold and SP1; Word Viewer 2003 Gold and SP3; Office Compatibility Pack… Affected: 2003; 2003
CVE-2008-4024	–	29%	Dec 10	Microsoft Office Word 2000 SP3 and 2002 SP3 and Office 2004 for Mac allow remote attackers to execute arbitrary code via a Word document with a crafted lcbPlcfBkfSdt field in the… Affected: 2003; 2003