KLA10857 Multiple vulnerabilities in Microsoft Office

🗓️ 09 Aug 2016 00:00:00Reported by Kaspersky LabType

kaspersky🔗 threats.kaspersky.com👁 75 Views

Multiple vulnerabilities in Microsoft Office. Exploitable memory handling vulnerabilities in OneNote and content can lead to sensitive information theft or code execution. Public exploits and malware exist. Related products include Microsoft-Office and Microsoft-Outlook. Complete list of advisories, CVEs, and KBs available

Reporter	Title	Published	Views	Family All 141
0day.today	Microsoft Word 2007/2010/2013/2016 - Out-of-Bounds Read Remote Code Execution (MS16-099)	10 Aug 201600:00	–	zdt
0day.today	Microsoft Word 2013/2016 - sprmSdyaTop Denial of Service (MS16-099)	16 Aug 201600:00	–	zdt
0day.today	Microsoft GDI+ - EMR_EXTTEXTOUTA and EMR_POLYTEXTOUTA Heap Based Buffer Overflow (MS16-097)	17 Aug 201600:00	–	zdt
0day.today	Microsoft GDI+ - ValidateBitmapInfo Invalid Pointer Arithmetic Out-of-Bounds Reads (MS16-097)	17 Aug 201600:00	–	zdt
0day.today	Microsoft GDI+ - DecodeCompressedRLEBitmap Invalid Pointer Arithmetic Out-of-Bounds Write (MS16-097)	17 Aug 201600:00	–	zdt
BDU FSTEC	The vulnerability of the Microsoft Office software package, which allows a hacker to execute arbitrary code.	23 Aug 201600:00	–	bdu_fstec
BDU FSTEC	The vulnerability of Microsoft Word text editor, the Microsoft Office suite of programs, and the Word Viewer document reading program allows a perpetrator to execute arbitrary code.	23 Aug 201600:00	–	bdu_fstec
BDU FSTEC	The vulnerability of Microsoft Word text editors, which allows a hacker to execute arbitrary code.	23 Aug 201600:00	–	bdu_fstec
BDU FSTEC	The vulnerability of the Microsoft OneNote note-taking software allows a perpetrator to obtain confidential information.	23 Aug 201600:00	–	bdu_fstec
BDU FSTEC	The vulnerability in the Word Viewer, a component of the Microsoft Office suite, and the Microsoft Word text editor allows a hacker to execute arbitrary code.	23 Aug 201600:00	–	bdu_fstec

Source	Link
portal	www.portal.msrc.microsoft.com/en-US/security-guidance/advisory/ADV160011
portal	www.portal.msrc.microsoft.com/en-US/security-guidance/advisory/CVE-2016-3304
portal	www.portal.msrc.microsoft.com/en-US/security-guidance/advisory/CVE-2016-3303
portal	www.portal.msrc.microsoft.com/en-US/security-guidance/advisory/CVE-2016-3301
portal	www.portal.msrc.microsoft.com/en-US/security-guidance/advisory/CVE-2016-3318
portal	www.portal.msrc.microsoft.com/en-US/security-guidance/advisory/CVE-2016-3317
portal	www.portal.msrc.microsoft.com/en-US/security-guidance/advisory/CVE-2016-3316
portal	www.portal.msrc.microsoft.com/en-US/security-guidance/advisory/CVE-2016-3315
portal	www.portal.msrc.microsoft.com/en-US/security-guidance/advisory/CVE-2016-3313
threats	www.threats.kaspersky.com/en/class/Exploit/

22 Jan 2024 00:00Current

8.2High risk

Vulners AI Score8.2

CVSS 37.8

CVSS 29.3

EPSS0.50506