KLA11225 Multiple vulnerabilities in Microsoft Office

🗓️ 10 Apr 2018 00:00:00Reported by Kaspersky LabType

kaspersky🔗 threats.kaspersky.com👁 288 Views

Multiple serious vulnerabilities in Microsoft Office. Malicious users can exploit these vulnerabilities to gain privileges, obtain sensitive information and execute arbitrary code. Includes improper font handling, unspecified vulnerabilities, memory corruption vulnerabilities, improper request handling, and malware exist for this vulnerability

Reporter	Title	Published	Views	Family All 191
BDU FSTEC	The vulnerability of the Microsoft Office suite arises from errors in memory object handling, allowing an attacker to execute arbitrary code.	31 May 201800:00	–	bdu_fstec
BDU FSTEC	The vulnerability of Microsoft Excel editors arises from errors in memory object processing, allowing attackers to execute arbitrary code.	31 May 201800:00	–	bdu_fstec
BDU FSTEC	The vulnerability of Microsoft Excel editors arises from errors in memory object processing, allowing attackers to execute arbitrary code.	31 May 201800:00	–	bdu_fstec
BDU FSTEC	The vulnerability of the Microsoft Office suite relates to errors in memory object handling, allowing an attacker to execute arbitrary code.	31 May 201800:00	–	bdu_fstec
BDU FSTEC	The vulnerability of Microsoft Excel editors arises from errors in memory object processing, allowing attackers to execute arbitrary code.	31 May 201800:00	–	bdu_fstec
BDU FSTEC	The vulnerability of Microsoft Excel’s spreadsheet editor involves an operation where data is written beyond the buffer in memory, allowing an attacker to execute arbitrary code.	7 Jun 201800:00	–	bdu_fstec
BDU FSTEC	The vulnerability of the Office Graphics component in the Microsoft Office software suite allows a hacker to execute arbitrary code.	18 Jun 201800:00	–	bdu_fstec
Circl	CVE-2018-0950	18 Apr 201817:50	–	circl
CNVD	Microsoft Excel Remote Code Execution Vulnerability (CNVD-2018-08416)	11 Apr 201800:00	–	cnvd
CNVD	Microsoft Office Information Disclosure Vulnerability (CNVD-2018-08640)	11 Apr 201800:00	–	cnvd

Source	Link
portal	www.portal.msrc.microsoft.com/en-US/security-guidance/advisory/CVE-2018-1028
portal	www.portal.msrc.microsoft.com/en-US/security-guidance/advisory/CVE-2018-0950
portal	www.portal.msrc.microsoft.com/en-US/security-guidance/advisory/CVE-2018-1014
portal	www.portal.msrc.microsoft.com/en-US/security-guidance/advisory/CVE-2018-1034
portal	www.portal.msrc.microsoft.com/en-US/security-guidance/advisory/CVE-2018-1027
portal	www.portal.msrc.microsoft.com/en-US/security-guidance/advisory/CVE-2018-1029
portal	www.portal.msrc.microsoft.com/en-US/security-guidance/advisory/CVE-2018-1032
portal	www.portal.msrc.microsoft.com/en-US/security-guidance/advisory/CVE-2018-1030
portal	www.portal.msrc.microsoft.com/en-US/security-guidance/advisory/CVE-2018-1026
portal	www.portal.msrc.microsoft.com/en-US/security-guidance/advisory/CVE-2018-1005

22 Jan 2024 00:00Current

8.8High risk

Vulners AI Score8.8

CVSS 38.8

CVSS 29.3

CVSS 3.17.8

EPSS0.41319