KLA11049 Multiple vulnerabilities in Microsoft Office

🗓️ 13 Jun 2017 00:00:00Reported by Kaspersky LabType

kaspersky🔗 threats.kaspersky.com👁 114 Views

Multiple vulnerabilities in Microsoft Office including remote code execution, security restriction bypass, and interface spoofing

Reporter	Title	Published	Views	Family All 435
0day.today	Microsoft Windows - USP10!otlReverseChainingLookup::apply Uniscribe Font Processing Out-of-Bounds Me	28 Jun 201700:00	–	zdt
0day.today	Microsoft Windows - USP10!otlValueRecord::adjustPos Uniscribe Font Processing Out-of-Bounds Memory R	30 Jun 201700:00	–	zdt
0day.today	Microsoft Windows - USP10!otlSinglePosLookup::getCoverageTable Uniscribe Font Processing Out-of-Boun	30 Jun 201700:00	–	zdt
0day.today	Microsoft Windows - USP10!NextCharInLiga Uniscribe Font Processing Out-of-Bounds Memory Read	30 Jun 201700:00	–	zdt
0day.today	Microsoft Windows - USP10!CreateIndexTable Uniscribe Font Processing Out-of-Bounds Memory Read	30 Jun 201700:00	–	zdt
0day.today	Microsoft Windows - USP10!SubstituteNtoM Uniscribe Font Processing Out-of-Bounds Memory Read	30 Jun 201700:00	–	zdt
0day.today	Microsoft Windows - USP10!ttoGetTableData Uniscribe Font Processing Out-of-Bounds Memory Read	30 Jun 201700:00	–	zdt
0day.today	Microsoft Windows - USP10!MergeLigRecords Uniscribe Font Processing Heap-Based Memory Corruption	30 Jun 201700:00	–	zdt
0day.today	Skype for Business 2016 - Cross-Site Scripting Vulnerability	13 Jul 201700:00	–	zdt
BDU FSTEC	Vulnerability of the Microsoft Office software package, the Microsoft Silverlight software platform, and the Word document viewing tool – Microsoft Office Word Viewer. Also vulnerable are the Microsoft Windows operating system, and the Microsoft Lync and Skype for Business instant messaging applications. These vulnerabilities allow attackers to inject arbitrary code into these systems.	30 Jun 201700:00	–	bdu_fstec

Source	Link
portal	www.portal.msrc.microsoft.com/en-US/security-guidance/advisory/ADV170008
portal	www.portal.msrc.microsoft.com/en-US/security-guidance/advisory/CVE-2017-8513
portal	www.portal.msrc.microsoft.com/en-US/security-guidance/advisory/CVE-2017-8512
portal	www.portal.msrc.microsoft.com/en-US/security-guidance/advisory/CVE-2017-8511
portal	www.portal.msrc.microsoft.com/en-US/security-guidance/advisory/CVE-2017-8510
portal	www.portal.msrc.microsoft.com/en-US/security-guidance/advisory/CVE-2017-8506
portal	www.portal.msrc.microsoft.com/en-US/security-guidance/advisory/CVE-2017-8507
portal	www.portal.msrc.microsoft.com/en-US/security-guidance/advisory/CVE-2017-8508
portal	www.portal.msrc.microsoft.com/en-US/security-guidance/advisory/CVE-2017-8545
portal	www.portal.msrc.microsoft.com/en-US/security-guidance/advisory/CVE-2017-8509

22 Jan 2024 00:00Current

9.3High risk

Vulners AI Score9.3

CVSS 38.8

CVSS 29.3

CVSS 3.15

EPSS0.39019