KLA11536 Multiple vulnerabilities in Microsoft Office

🗓️ 13 Aug 2019 00:00:00Reported by Kaspersky LabType

kaspersky🔗 threats.kaspersky.com👁 121 Views

Multiple vulnerabilities in Microsoft Office including cross-site-scripting, spoofing, remote code execution, elevation of privilege, and information disclosure. Malicious users can execute arbitrary code, gain privileges, and obtain sensitive information

Reporter	Title	Published	Views	Family All 244
BDU FSTEC	Vulnerability of Microsoft SharePoint, Microsoft Office, Office 365, and Microsoft Word software packages, allowing a hacker to execute arbitrary code.	16 Aug 201900:00	–	bdu_fstec
BDU FSTEC	The vulnerability of the Windows Jet Database Engine database management system allows a malicious individual to execute arbitrary code on operating systems running Windows, Microsoft Office programs, and Office 365.	22 Aug 201900:00	–	bdu_fstec
BDU FSTEC	The vulnerability of the Windows operating system’s font library allows a hacker to execute arbitrary code and gain control over the vulnerable system.	22 Aug 201900:00	–	bdu_fstec
BDU FSTEC	The vulnerability of the Windows operating system’s font library allows a hacker to execute arbitrary code and gain control over the vulnerable system.	22 Aug 201900:00	–	bdu_fstec
BDU FSTEC	The vulnerability of the Microsoft Outlook iOS client stems from insufficient validation of input data. This allows attackers to execute cross-site scripting attacks and compromise the integrity of the protected information.	27 Aug 201900:00	–	bdu_fstec
BDU FSTEC	The vulnerability of the Windows Graphics component of the Windows operating system allows attackers to disclose protected information.	27 Aug 201900:00	–	bdu_fstec
BDU FSTEC	The vulnerability of the Windows Graphics component of the Windows operating system allows attackers to disclose protected information.	27 Aug 201900:00	–	bdu_fstec
BDU FSTEC	The vulnerability of the Microsoft Outlook email client, related to errors in memory object handling, allows a malicious actor to trigger memory corruption and execute arbitrary code.	27 Aug 201900:00	–	bdu_fstec
BDU FSTEC	The vulnerability of the Microsoft Outlook email client, related to errors in memory object handling, allows a hacker to execute arbitrary code.	27 Aug 201900:00	–	bdu_fstec
BDU FSTEC	The vulnerability of Microsoft SharePoint Server, Microsoft SharePoint Enterprise Server, and the Microsoft SharePoint Foundation software for electronic document management lies in memory object processing errors, which allow attackers to exploit these vulnerabilities to disclose protected information.	27 Aug 201900:00	–	bdu_fstec

Source	Link
portal	www.portal.msrc.microsoft.com/en-US/security-guidance/advisory/CVE-2019-1203
portal	www.portal.msrc.microsoft.com/en-US/security-guidance/advisory/CVE-2019-1218
portal	www.portal.msrc.microsoft.com/en-US/security-guidance/advisory/CVE-2019-1205
portal	www.portal.msrc.microsoft.com/en-US/security-guidance/advisory/CVE-2019-1204
portal	www.portal.msrc.microsoft.com/en-US/security-guidance/advisory/CVE-2019-1199
portal	www.portal.msrc.microsoft.com/en-US/security-guidance/advisory/CVE-2019-1200
portal	www.portal.msrc.microsoft.com/en-US/security-guidance/advisory/CVE-2019-1202
portal	www.portal.msrc.microsoft.com/en-US/security-guidance/advisory/CVE-2019-1153
portal	www.portal.msrc.microsoft.com/en-US/security-guidance/advisory/CVE-2019-1155
portal	www.portal.msrc.microsoft.com/en-US/security-guidance/advisory/CVE-2019-1201

22 Jan 2024 00:00Current

9.1High risk

Vulners AI Score9.1

CVSS 29.3

CVSS 37.8

CVSS 3.19.8

EPSS0.15493

SSVC