KLA11100 Multiple vulnerabilities in Microsoft Office

🗓️ 12 Sep 2017 00:00:00Reported by Kaspersky LabType

kaspersky🔗 threats.kaspersky.com👁 168 Views

Multiple vulnerabilities in Microsoft Office. Exploits lead to code execution, sensitive info leaks, and privilege escalatio

Reporter	Title	Published	Views	Family All 259
0day.today	Microsoft Windows Kernel - win32k.sys TTF Font Processing - Out-of-Bounds Reads/Writes with Malforme	18 Sep 201700:00	–	zdt
BDU FSTEC	The vulnerability affects the Uniscribe services on the Windows operating system, the Microsoft Office software suite, the web conference software Live Meeting, the instant messaging application Skype for Business, and the instant messaging software Microsoft Lync. This vulnerability arises due to an out-of-buffer operation in memory, allowing an attacker to execute arbitrary code.	11 Oct 201700:00	–	bdu_fstec
BDU FSTEC	The vulnerability of the Microsoft PowerPoint presentation preparation program, the Microsoft SharePoint Server corporate application package, and the Office Online Server web server is related to incorrect handling of objects in memory, allowing an attacker to execute arbitrary code.	17 Oct 201700:00	–	bdu_fstec
BDU FSTEC	The vulnerability of Microsoft Publisher software lies in its improper handling of objects in memory, allowing a hacker to execute arbitrary code.	25 Oct 201700:00	–	bdu_fstec
BDU FSTEC	The vulnerability of the Windows operating system’s font library, allowing a hacker to execute arbitrary code	26 Oct 201700:00	–	bdu_fstec
BDU FSTEC	The vulnerability of Microsoft Excel, Microsoft Excel for Mac, and the Microsoft Office Compatibility Pack relates to improper handling of objects in memory, allowing an attacker to gain privileges of the current user.	26 Oct 201700:00	–	bdu_fstec
BDU FSTEC	Vulnerability of Microsoft Office software, related to improper handling of objects in memory, allows a hacker to execute arbitrary code.	26 Oct 201700:00	–	bdu_fstec
BDU FSTEC	The vulnerability of the Microsoft Office software package arises from improper handling of objects in memory, allowing an attacker to execute arbitrary code.	26 Oct 201700:00	–	bdu_fstec
BDU FSTEC	The vulnerability of Microsoft Excel for Mac spreadsheet editors, related to improper handling of objects in memory, allows a hacker to execute arbitrary code.	26 Oct 201700:00	–	bdu_fstec
Circl	CVE-2017-8682	18 Sep 201700:00	–	circl

Source	Link
portal	www.portal.msrc.microsoft.com/en-US/security-guidance/advisory/ADV170015
portal	www.portal.msrc.microsoft.com/en-US/security-guidance/advisory/CVE-2017-8567
portal	www.portal.msrc.microsoft.com/en-US/security-guidance/advisory/CVE-2017-8632
portal	www.portal.msrc.microsoft.com/en-US/security-guidance/advisory/CVE-2017-8630
portal	www.portal.msrc.microsoft.com/en-US/security-guidance/advisory/CVE-2017-8631
portal	www.portal.msrc.microsoft.com/en-US/security-guidance/advisory/CVE-2017-8682
portal	www.portal.msrc.microsoft.com/en-US/security-guidance/advisory/CVE-2017-8744
portal	www.portal.msrc.microsoft.com/en-US/security-guidance/advisory/CVE-2017-8745
portal	www.portal.msrc.microsoft.com/en-US/security-guidance/advisory/CVE-2017-8742
portal	www.portal.msrc.microsoft.com/en-US/security-guidance/advisory/CVE-2017-8695

22 Jan 2024 00:00Current

8.4High risk

Vulners AI Score8.4

CVSS 38.8

CVSS 29.3

CVSS 3.17.8

EPSS0.49765