KLA11243 Multiple vulnerabilities in Microsoft Office

🗓️ 08 May 2018 00:00:00Reported by Kaspersky LabType

kaspersky

kaspersky🔗 threats.kaspersky.com👁 70 Views

Multiple vulnerabilities in Microsoft Office, including arbitrary code execution, sensitive information exposure, security restrictions bypass, and privilege escalation

Reporter	Title	Published	Views	Family All 181
BDU FSTEC	The vulnerability of the form development tool for data input based on XML, Microsoft InfoPath, arises from errors in object processing in memory, allowing attackers to execute arbitrary code.	22 Jun 201800:00	–	bdu_fstec
BDU FSTEC	The vulnerability of Microsoft Excel editors arises from an operation that goes beyond buffer boundaries in memory, allowing an attacker to execute arbitrary code.	22 Jun 201800:00	–	bdu_fstec
BDU FSTEC	The vulnerability of the Microsoft Office software arises from an operation that goes beyond buffer boundaries in memory, allowing an attacker to execute arbitrary code.	22 Jun 201800:00	–	bdu_fstec
BDU FSTEC	The vulnerability of the Microsoft Office software arises from an operation that goes beyond buffer boundaries in memory, allowing an attacker to execute arbitrary code.	22 Jun 201800:00	–	bdu_fstec
BDU FSTEC	The vulnerability of the Microsoft Office software arises from an operation that goes beyond buffer boundaries in memory, allowing an attacker to execute arbitrary code.	22 Jun 201800:00	–	bdu_fstec
BDU FSTEC	The vulnerability of Microsoft Excel editors arises from an operation that goes beyond buffer boundaries in memory, allowing an attacker to execute arbitrary code.	22 Jun 201800:00	–	bdu_fstec
BDU FSTEC	The vulnerability of the Microsoft Office suite arises from an operation that goes beyond buffer boundaries in memory, allowing an attacker to execute arbitrary code.	29 Jun 201800:00	–	bdu_fstec
CNVD	Microsoft Excel Remote Code Execution Vulnerability (CNVD-2018-09655)	10 May 201800:00	–	cnvd
CNVD	Microsoft SharePoint Elevation of Privilege Vulnerability	10 May 201800:00	–	cnvd
CNVD	Microsoft Office Remote Code Execution Vulnerability (CNVD-2018-10431)	10 May 201800:00	–	cnvd

Source	Link
portal	www.portal.msrc.microsoft.com/en-US/security-guidance/advisory/CVE-2018-8147
portal	www.portal.msrc.microsoft.com/en-US/security-guidance/advisory/CVE-2018-8148
portal	www.portal.msrc.microsoft.com/en-US/security-guidance/advisory/CVE-2018-8149
portal	www.portal.msrc.microsoft.com/en-US/security-guidance/advisory/CVE-2018-8150
portal	www.portal.msrc.microsoft.com/en-US/security-guidance/advisory/CVE-2018-8155
portal	www.portal.msrc.microsoft.com/en-US/security-guidance/advisory/CVE-2018-8156
portal	www.portal.msrc.microsoft.com/en-US/security-guidance/advisory/CVE-2018-8157
portal	www.portal.msrc.microsoft.com/en-US/security-guidance/advisory/CVE-2018-8158
portal	www.portal.msrc.microsoft.com/en-US/security-guidance/advisory/CVE-2018-8160
portal	www.portal.msrc.microsoft.com/en-US/security-guidance/advisory/CVE-2018-8161