KLA10981 Multiple vulnerabilities in Microsoft Office

🗓️ 14 Mar 2017 00:00:00Reported by Kaspersky LabType

kaspersky🔗 threats.kaspersky.com👁 252 Views

Multiple serious vulnerabilities in Microsoft Office, allowing remote code execution, privilege escalation, and denial of service

Reporter	Title	Published	Views	Family All 234
0day.today	Microsoft GDI+ - gdiplus!GetRECTSForPlayback Out-of-Bounds Read (MS17-013)	20 Mar 201700:00	–	zdt
0day.today	Microsoft Windows - USP10!otlList::insertAt Uniscribe Font Processing Heap-Based Buffer Overflow (MS	20 Mar 201700:00	–	zdt
Information Security Automation	Downloading and analyzing NVD CVE feed	2 Oct 201723:27	–	avleonov
BDU FSTEC	Vulnerability of the Windows operating system, allowing a perpetrator to execute arbitrary code	31 Mar 201700:00	–	bdu_fstec
BDU FSTEC	The vulnerability of Microsoft SharePoint Foundation’s electronic document management software allows a hacker to execute a cross-script in a local security context.	31 Mar 201700:00	–	bdu_fstec
BDU FSTEC	The vulnerability of Microsoft Word text editors, which allows attackers to obtain confidential information	31 Mar 201700:00	–	bdu_fstec
BDU FSTEC	The vulnerability of the Windows operating system, which allows a perpetrator to trigger a service failure or otherwise affect the system.	31 Mar 201700:00	–	bdu_fstec
BDU FSTEC	The vulnerability of the Windows operating system allows a perpetrator to obtain confidential information from the process memory, cause a service failure, or have other adverse effects on the system.	31 Mar 201700:00	–	bdu_fstec
BDU FSTEC	The vulnerability of Microsoft Word text editors allows a hacker to trigger a service failure or execute arbitrary code.	31 Mar 201700:00	–	bdu_fstec
BDU FSTEC	The vulnerability of the Microsoft Office Compatibility Pack allows a perpetrator to trigger a service failure or execute arbitrary code.	31 Mar 201700:00	–	bdu_fstec

Source	Link
technet	www.technet.microsoft.com/library/security/MS17-014
portal	www.portal.msrc.microsoft.com/en-US/security-guidance/advisory/CVE-2017-0014
portal	www.portal.msrc.microsoft.com/en-US/security-guidance/advisory/CVE-2017-0060
portal	www.portal.msrc.microsoft.com/en-US/security-guidance/advisory/CVE-2017-0073
portal	www.portal.msrc.microsoft.com/en-US/security-guidance/advisory/CVE-2017-0108
portal	www.portal.msrc.microsoft.com/en-US/security-guidance/advisory/CVE-2017-0052
portal	www.portal.msrc.microsoft.com/en-US/security-guidance/advisory/CVE-2017-0053
portal	www.portal.msrc.microsoft.com/en-US/security-guidance/advisory/CVE-2017-0129
portal	www.portal.msrc.microsoft.com/en-US/security-guidance/advisory/CVE-2017-0020
portal	www.portal.msrc.microsoft.com/en-US/security-guidance/advisory/CVE-2017-0027

22 Jan 2024 00:00Current

9.1High risk

Vulners AI Score9.1

CVSS 37.8

CVSS 29.3

CVSS 3.15.5

EPSS0.4318