KLA11484 Multiple vulnerabilities in Microsoft Office

🗓️ 14 May 2019 00:00:00Reported by Kaspersky LabType

kaspersky🔗 threats.kaspersky.com👁 49 Views

Multiple vulnerabilities in Microsoft Office. Privilege escalation, UI spoofing, info disclosure, arbitrary code execution via crafted web, file, pages

Reporter	Title	Published	Views	Family All 171
BDU FSTEC	The vulnerability of the Skype instant messaging application for Android operating systems allows attackers to disclose protected information.	6 Jun 201900:00	–	bdu_fstec
BDU FSTEC	The vulnerability of the Access Connectivity Engine component in the Microsoft Office software allows a hacker to execute arbitrary code.	6 Jun 201900:00	–	bdu_fstec
BDU FSTEC	The vulnerability of the Access Connectivity Engine component in the Microsoft Office software allows a hacker to execute arbitrary code.	6 Jun 201900:00	–	bdu_fstec
BDU FSTEC	The vulnerability of the Access Connectivity Engine component in the Microsoft Office software allows a hacker to execute arbitrary code.	6 Jun 201900:00	–	bdu_fstec
BDU FSTEC	The vulnerability of Microsoft SharePoint Server packages, related to the lack of measures for cleaning input data, allows attackers to execute cross-site scripting attacks.	6 Jun 201900:00	–	bdu_fstec
BDU FSTEC	The vulnerability of Microsoft SharePoint Foundation and the Microsoft SharePoint Enterprise Server software lies in the lack of proper input data validation. This allows attackers to execute cross-site scripting attacks and compromise the integrity of protected information.	14 Jun 201900:00	–	bdu_fstec
BDU FSTEC	The software vulnerabilities of Microsoft SharePoint Foundation allow attackers to execute cross-site scripting attacks and compromise the integrity of protected information, due to insufficient validation of input data.	14 Jun 201900:00	–	bdu_fstec
BDU FSTEC	The vulnerability of Microsoft SharePoint Foundation and the Microsoft SharePoint Enterprise Server software suite relates to security configuration errors, allowing an attacker to execute arbitrary code.	14 Jun 201900:00	–	bdu_fstec
BDU FSTEC	Vulnerabilities of Microsoft Office and Office 365 applications, Office Online Server web servers, and Microsoft Word text editor are caused by an operation that goes beyond buffer boundaries in memory, allowing attackers to execute arbitrary code.	14 Jun 201900:00	–	bdu_fstec
BDU FSTEC	The vulnerability of Microsoft SharePoint Foundation and the Microsoft SharePoint Enterprise Server software suite lies in the lack of protection for administrative data, allowing attackers to carry out cross-site scripting attacks.	14 Jun 201900:00	–	bdu_fstec

Source	Link
portal	www.portal.msrc.microsoft.com/en-US/security-guidance/advisory/CVE-2019-0958
portal	www.portal.msrc.microsoft.com/en-US/security-guidance/advisory/CVE-2019-0951
portal	www.portal.msrc.microsoft.com/en-US/security-guidance/advisory/CVE-2019-0932
portal	www.portal.msrc.microsoft.com/en-US/security-guidance/advisory/CVE-2019-0946
portal	www.portal.msrc.microsoft.com/en-US/security-guidance/advisory/CVE-2019-0956
portal	www.portal.msrc.microsoft.com/en-US/security-guidance/advisory/CVE-2019-0952
portal	www.portal.msrc.microsoft.com/en-US/security-guidance/advisory/CVE-2019-0963
portal	www.portal.msrc.microsoft.com/en-US/security-guidance/advisory/CVE-2019-0950
portal	www.portal.msrc.microsoft.com/en-US/security-guidance/advisory/CVE-2019-0953
portal	www.portal.msrc.microsoft.com/en-US/security-guidance/advisory/CVE-2019-0945

22 Jan 2024 00:00Current

9High risk

Vulners AI Score9

CVSS 29.3

CVSS 38.8

CVSS 3.15.4

EPSS0.13695

SSVC