KLA10785 Code execution vulnerability in Microsoft Office

🗓️ 12 Apr 2016 00:00:00Reported by Kaspersky LabType

kaspersky🔗 threats.kaspersky.com👁 72 Views

Code execution vulnerability in Microsoft Office. Allows remote code execution via specially designed content. Mitigate using Microsoft Office File Block Policy

Reporter	Title	Published	Views	Family All 117
0day.today	Microsoft Excel - Out-of-Bounds Read Remote Code Execution (MS16-042)	14 Apr 201600:00	–	zdt
0day.today	Microsoft Windows - Kernel win32k.sys TTF Processing EBLC / EBSC Tables Pool Corruption (MS16-039)	28 Apr 201600:00	–	zdt
BDU FSTEC	The vulnerability of the Windows operating system and the Microsoft .NET Framework software platform allows a perpetrator to execute arbitrary code.	25 Apr 201600:00	–	bdu_fstec
BDU FSTEC	The vulnerability of the Microsoft Excel Viewer, a spreadsheet viewer, and the Microsoft Excel editor, as well as the Word For Mac text editor, allows a perpetrator to execute arbitrary code.	25 Apr 201600:00	–	bdu_fstec
BDU FSTEC	The vulnerability of the Microsoft Office Compatibility Pack, the Microsoft Excel spreadsheet editor, the Microsoft SharePoint Foundation email software, and the Microsoft SharePoint Designer HTML editor allows a perpetrator to execute arbitrary code.	25 Apr 201600:00	–	bdu_fstec
BDU FSTEC	The vulnerability of the Microsoft Office Compatibility Pack, the Microsoft Word text editor, the Office Web Apps Server web server, the Microsoft SharePoint Server enterprise application package, the Word Viewer document viewer software, and the Microsoft Office software suite allows a perpetrator to execute arbitrary code.	25 Apr 201600:00	–	bdu_fstec
BDU FSTEC	The vulnerability of the Microsoft Office Compatibility Pack, the Microsoft Excel Viewer for electronic spreadsheet viewing, the Microsoft Excel spreadsheet editor, and the Word For Mac text editor allows a perpetrator to execute arbitrary code.	25 Apr 201600:00	–	bdu_fstec
Circl	CVE-2016-0122	14 Apr 201600:00	–	circl
Circl	CVE-2016-0127	31 Aug 202503:01	–	circl
Circl	CVE-2016-0145	28 Apr 201600:00	–	circl

Source	Link
portal	www.portal.msrc.microsoft.com/en-US/security-guidance/advisory/CVE-2016-0145
portal	www.portal.msrc.microsoft.com/en-US/security-guidance/advisory/CVE-2016-0136
portal	www.portal.msrc.microsoft.com/en-US/security-guidance/advisory/CVE-2016-0139
portal	www.portal.msrc.microsoft.com/en-US/security-guidance/advisory/CVE-2016-0122
portal	www.portal.msrc.microsoft.com/en-US/security-guidance/advisory/CVE-2016-0127
threats	www.threats.kaspersky.com/en/class/Exploit/
threats	www.threats.kaspersky.com/en/product/Microsoft-Office/
support	www.support.microsoft.com/kb/3114994
support	www.support.microsoft.com/kb/3114927
support	www.support.microsoft.com/kb/3114937

22 Jan 2024 00:00Current

8.5High risk

Vulners AI Score8.5

CVSS 38.8

CVSS 29.3

EPSS0.43272