KLA10842 Multiple code execution vulnerabilities in Microsoft Office

🗓️ 12 Jul 2016 00:00:00Reported by Kaspersky LabType

kaspersky🔗 threats.kaspersky.com👁 42 Views

Multiple code execution vulnerabilities found in Microsoft Office due to improper memory objects and XLA files handling, allowing remote exploitation to execute arbitrary code. To mitigate, block RTF files from opening. More info at MS16-088 advisory

Reporter	Title	Published	Views	Family All 108
BDU FSTEC	The vulnerabilities of Microsoft Excel editors, the Microsoft Office Compatibility Pack, and the Microsoft Excel Viewer allow a perpetrator to execute arbitrary code.	16 Aug 201600:00	–	bdu_fstec
BDU FSTEC	The vulnerability of the Microsoft Word Viewer software for reading doc files allows a hacker to execute arbitrary code.	16 Aug 201600:00	–	bdu_fstec
BDU FSTEC	The vulnerabilities of the Microsoft Office suite of programs, the Microsoft Word text editor, the Microsoft Office Compatibility Pack, the Microsoft Word Viewer software for reading doc files, the Microsoft SharePoint Server corporate application suite, the Microsoft Office Web Apps, and the Microsoft Office Online Server web server allow a perpetrator to execute arbitrary code.	16 Aug 201600:00	–	bdu_fstec
BDU FSTEC	The vulnerabilities of the Microsoft Office software package, the Microsoft Word text editor, the Microsoft SharePoint Server corporate application, and the Microsoft Office Web Apps software package allow a perpetrator to execute arbitrary code.	16 Aug 201600:00	–	bdu_fstec
BDU FSTEC	The vulnerability of the Microsoft Office suite of programs, the Microsoft Word text editor, the Word Viewer program for reading DOC files, and the Microsoft Office Compatibility Pack allows a perpetrator to execute arbitrary code.	16 Aug 201600:00	–	bdu_fstec
BDU FSTEC	The vulnerabilities of the Microsoft Office suite of programs, the Microsoft Word word processor, the Microsoft Excel spreadsheet editor, the Microsoft Office Web Apps suite of programs, the Microsoft PowerPoint presentation software, and the Microsoft SharePoint Server corporate application allow a perpetrator to execute arbitrary code.	16 Aug 201600:00	–	bdu_fstec
BDU FSTEC	The vulnerability of the Microsoft Outlook email client, which allows a hacker to execute arbitrary code.	16 Aug 201600:00	–	bdu_fstec
CNVD	Microsoft Office Remote Code Execution Vulnerability (CNVD-2016-04951)	14 Jul 201600:00	–	cnvd
CNVD	Microsoft Office Remote Code Execution Vulnerability (CNVD-2016-04952)	14 Jul 201600:00	–	cnvd
CNVD	Microsoft Word Arbitrary Code Execution Vulnerability (CNVD-2016-04953)	14 Jul 201600:00	–	cnvd

Source	Link
portal	www.portal.msrc.microsoft.com/en-US/security-guidance/advisory/CVE-2016-3278
portal	www.portal.msrc.microsoft.com/en-US/security-guidance/advisory/CVE-2016-3279
portal	www.portal.msrc.microsoft.com/en-US/security-guidance/advisory/CVE-2016-3280
portal	www.portal.msrc.microsoft.com/en-US/security-guidance/advisory/CVE-2016-3281
portal	www.portal.msrc.microsoft.com/en-US/security-guidance/advisory/CVE-2016-3282
portal	www.portal.msrc.microsoft.com/en-US/security-guidance/advisory/CVE-2016-3283
portal	www.portal.msrc.microsoft.com/en-US/security-guidance/advisory/CVE-2016-3284
threats	www.threats.kaspersky.com/en/product/Microsoft-Office/
threats	www.threats.kaspersky.com/en/product/Microsoft-Sharepoint-Server/
support	www.support.microsoft.com/kb/3115289

22 Jan 2024 00:00Current

7.7High risk

Vulners AI Score7.7

CVSS 37.8

CVSS 29.3

EPSS0.26291