KLA10842 Multiple code execution vulnerabilities in Microsoft Office

🗓️ 12 Jul 2016 00:00:00Reported by Kaspersky LabType

kaspersky🔗 threats.kaspersky.com👁 37 Views

Multiple code execution vulnerabilities found in Microsoft Office due to improper memory objects and XLA files handling, allowing remote exploitation to execute arbitrary code. To mitigate, block RTF files from opening. More info at MS16-088 advisory

Reporter	Title	Published	Views	Family All 98
CNVD	Microsoft Office Remote Code Execution Vulnerability (CNVD-2016-04951)	14 Jul 201600:00	–	cnvd
CNVD	Microsoft Office Remote Code Execution Vulnerability (CNVD-2016-04952)	14 Jul 201600:00	–	cnvd
CNVD	Microsoft Word Arbitrary Code Execution Vulnerability (CNVD-2016-04953)	14 Jul 201600:00	–	cnvd
CNVD	Microsoft Outlook Arbitrary Code Execution Vulnerability	14 Jul 201600:00	–	cnvd
CNVD	Microsoft Excel Arbitrary Code Execution Vulnerability (CNVD-2016-04960)	14 Jul 201600:00	–	cnvd
CNVD	Microsoft Office Remote Code Execution Vulnerability (CNVD-2016-04973)	14 Jul 201600:00	–	cnvd
CNVD	Microsoft Word Viewer Arbitrary Code Execution Vulnerability	14 Jul 201600:00	–	cnvd
Check Point Advisories	Microsoft Office Remote Code Execution (MS16-088: CVE-2016-3279)	12 Jul 201600:00	–	checkpoint_advisories
Check Point Advisories	Microsoft Office Memory Corruption (MS16-088: CVE-2016-3283)	12 Jul 201600:00	–	checkpoint_advisories
Check Point Advisories	Microsoft Office Memory Corruption (MS16-088: CVE-2016-3281)	12 Jul 201600:00	–	checkpoint_advisories

Source	Link
portal	www.portal.msrc.microsoft.com/en-US/security-guidance/advisory/CVE-2016-3278
portal	www.portal.msrc.microsoft.com/en-US/security-guidance/advisory/CVE-2016-3279
portal	www.portal.msrc.microsoft.com/en-US/security-guidance/advisory/CVE-2016-3280
portal	www.portal.msrc.microsoft.com/en-US/security-guidance/advisory/CVE-2016-3281
portal	www.portal.msrc.microsoft.com/en-US/security-guidance/advisory/CVE-2016-3282
portal	www.portal.msrc.microsoft.com/en-US/security-guidance/advisory/CVE-2016-3283
portal	www.portal.msrc.microsoft.com/en-US/security-guidance/advisory/CVE-2016-3284
threats	www.threats.kaspersky.com/en/product/Microsoft-Office/
threats	www.threats.kaspersky.com/en/product/Microsoft-Sharepoint-Server/
support	www.support.microsoft.com/kb/3115289

22 Jan 2024 00:00Current

7.7High risk

Vulners AI Score7.7

CVSS 37.8

CVSS 29.3

EPSS0.54593