KLA10980 Multiple vulnerabilities in Microsoft Office

🗓️ 14 Mar 2017 00:00:00Reported by Kaspersky LabType

kaspersky🔗 threats.kaspersky.com👁 1095 Views

Multiple vulnerabilities in Microsoft Office. Malicious users can exploit these vulnerabilities to obtain sensitive information, execute arbitrary code. Vulnerabilities include information disclosure and remote code execution in Windows GDI and Graphics Component

Reporter	Title	Published	Views	Family All 80
0day.today	Microsoft GDI+ - gdiplus!GetRECTSForPlayback Out-of-Bounds Read (MS17-013)	20 Mar 201700:00	–	zdt
0day.today	Microsoft Windows - USP10!otlList::insertAt Uniscribe Font Processing Heap-Based Buffer Overflow (MS	20 Mar 201700:00	–	zdt
BDU FSTEC	Vulnerability of the Windows operating system, allowing a perpetrator to execute arbitrary code	31 Mar 201700:00	–	bdu_fstec
BDU FSTEC	The vulnerability of the Windows operating system, which allows a perpetrator to trigger a service failure or otherwise affect the system.	31 Mar 201700:00	–	bdu_fstec
BDU FSTEC	The vulnerability of the Windows operating system allows a perpetrator to obtain confidential information from the process memory, cause a service failure, or have other adverse effects on the system.	31 Mar 201700:00	–	bdu_fstec
BDU FSTEC	The vulnerability of the Microsoft Office software, a component of the Windows operating system, allows a perpetrator to execute arbitrary code.	6 Apr 201700:00	–	bdu_fstec
Circl	CVE-2017-0060	20 Mar 201700:00	–	circl
Circl	CVE-2017-0108	20 Mar 201700:00	–	circl
CNVD	Microsoft Windows Graphics Component Local Information Disclosure Vulnerability	16 Mar 201700:00	–	cnvd
CNVD	Microsoft windows graphics component remote code execution vulnerability (CNVD-2017-03687)	15 Mar 201700:00	–	cnvd

Source	Link
portal	www.portal.msrc.microsoft.com/api/security-guidance/en-US/CVE/CVE-2017-0073
portal	www.portal.msrc.microsoft.com/api/security-guidance/en-US/CVE/CVE-2017-0014
portal	www.portal.msrc.microsoft.com/api/security-guidance/en-US/CVE/CVE-2017-0108
portal	www.portal.msrc.microsoft.com/api/security-guidance/en-US/CVE/CVE-2017-0060
exploit-db	www.exploit-db.com/exploits/41656
exploit-db	www.exploit-db.com/exploits/41647
threats	www.threats.kaspersky.com/en/class/Exploit/
threats	www.threats.kaspersky.com/en/product/Microsoft-Silverlight/
threats	www.threats.kaspersky.com/en/product/Microsoft-Office/
threats	www.threats.kaspersky.com/en/product/Microsoft-Word/

29 Sep 2020 00:00Current

7.9High risk

Vulners AI Score7.9

CVSS 37.8

CVSS 29.3

CVSS 3.15.5

EPSS0.36707