← Database

CVE-2004-0848

HIGH CVSS: 7.5 Published: 2005-02-08 Modified: 2026-06-16

Description

Buffer overflow in Microsoft Office XP allows remote attackers to execute arbitrary code via a link with a URL file location containing long inputs after (1) "%00 (null byte) in .doc filenames or (2) "%0a" (carriage return) in .rtf filenames.

Affected Platforms

Microsoft VisioMicrosoft ProjectMicrosoft PowerpointMicrosoft WorksMicrosoft WordMicrosoft Office

Weakness Type

NVD-CWE-Other

References