KLA10804 Code execution vulnerabilities in Microsoft Office

🗓️ 10 May 2016 00:00:00Reported by Kaspersky LabType

kaspersky🔗 threats.kaspersky.com👁 100 Views

Code execution vulnerabilities in Microsoft Office. Malicious users can exploit improper memory objects and embedded fonts handling via specially designed content, leading to remote arbitrary code execution. Mitigation requires preventing Office from opening RTF documents from unknown or untrusted sources

Reporter	Title	Published	Views	Family All 72
ATTACKERKB	CVE-2016-0198	11 May 201601:59	–	attackerkb
BDU FSTEC	The vulnerability of the Word Viewer, Microsoft Word text editor, Microsoft Office suite, Microsoft Office Compatibility Pack, and Word For Mac text editor allows a perpetrator to execute arbitrary code.	31 May 201600:00	–	bdu_fstec
BDU FSTEC	The vulnerability of the Microsoft SharePoint Server corporate application package, the Microsoft Office Web Apps package, Microsoft Office, and the Microsoft Word text editor allows a perpetrator to execute arbitrary code.	31 May 201600:00	–	bdu_fstec
BDU FSTEC	The vulnerabilities of Microsoft Office packages, Microsoft Office Web Apps, the Microsoft SharePoint Server corporate application package, and the Microsoft Office software allow a perpetrator to execute arbitrary code.	31 May 201600:00	–	bdu_fstec
BDU FSTEC	The vulnerabilities of Microsoft Office packages, Microsoft Office Web Apps, and the Microsoft SharePoint Server corporate application allow a perpetrator to execute arbitrary code.	31 May 201600:00	–	bdu_fstec
Circl	CVE-2016-0126	31 Aug 202503:01	–	circl
CNVD	Microsoft Office Memory Corruption Vulnerability (CNVD-2016-03019)	11 May 201600:00	–	cnvd
CNVD	Microsoft Office Graphics Remote Code Execution Vulnerability	12 May 201600:00	–	cnvd
CNVD	Microsoft Office Memory Corruption Vulnerability (CNVD-2016-03117)	12 May 201600:00	–	cnvd
CNVD	Microsoft Office Memory Corruption Vulnerability (CNVD-2016-03118)	12 May 201600:00	–	cnvd

Source	Link
portal	www.portal.msrc.microsoft.com/en-US/security-guidance/advisory/CVE-2016-0183
portal	www.portal.msrc.microsoft.com/en-US/security-guidance/advisory/CVE-2016-0126
portal	www.portal.msrc.microsoft.com/en-US/security-guidance/advisory/CVE-2016-0140
portal	www.portal.msrc.microsoft.com/en-US/security-guidance/advisory/CVE-2016-0198
threats	www.threats.kaspersky.com/en/product/Microsoft-Office/
support	www.support.microsoft.com/kb/3115124
support	www.support.microsoft.com/kb/3155777
support	www.support.microsoft.com/kb/3115121
support	www.support.microsoft.com/kb/2984938
support	www.support.microsoft.com/kb/3115123

22 Jan 2024 00:00Current

8.7High risk

Vulners AI Score8.7

CVSS 38.8

CVSS 29.3

EPSS0.29354