Vulnerability Database

296,733

Total vulnerabilities in the database

CVE-2004-0848

Buffer overflow in Microsoft Office XP allows remote attackers to execute arbitrary code via a link with a URL file location containing long inputs after (1) "%00 (null byte) in .doc filenames or (2) "%0a" (carriage return) in .rtf filenames.

  • Published: Feb 8, 2005
  • Updated: Apr 13, 2023
  • CVE: CVE-2004-0848
  • Severity: High
  • Exploit:

CVSS v2:

  • Severity: High
  • Score: 7.5
  • AV:N/AC:L/Au:N/C:P/I:P/A:P

No CWE or OWASP classifications available.

Software From Fixed in
microsoft / word 2002-sp3 2002-sp3.x
microsoft / visio 2002-sp2 2002-sp2.x
microsoft / visio 2002-sp1 2002-sp1.x
microsoft / word 2002-sp1 2002-sp1.x
microsoft / project 2002-sp1 2002-sp1.x
microsoft / powerpoint 2002-sp2 2002-sp2.x
microsoft / visio 2002 2002.x
microsoft / powerpoint 2002 2002.x
microsoft / office xp-sp3 xp-sp3.x
microsoft / office - -
microsoft / project 2002 2002.x
microsoft / office xp-sp2 xp-sp2.x
microsoft / works 2002 2002.x
microsoft / powerpoint 2002-sp3 2002-sp3.x
microsoft / word 2002 2002.x
microsoft / works 2003 2003.x
microsoft / powerpoint 2002-sp1 2002-sp1.x
microsoft / word 2002-sp2 2002-sp2.x
microsoft / works 2004 2004.x
microsoft / office xp-sp1 xp-sp1.x