MS14-072: Description of the security update for the .NET Framework 3.5 on Windows 8.1 and Windows Server 2012 R2: November 11, 2014

MS14-072: Description of the security update for the .NET Framework 3.5 on Windows 8.1 and Windows Server 2012 R2: November 11, 2014 View products that this article applies to. Introduction This update resolves a vulnerability in the Microsoft .NET Framework that could allow elevation of privileg...

MS14-024: Description of the security update for Office 2013: May 13, 2014

MS14-024: Description of the security update for Office 2013: May 13, 2014 INTRODUCTION Microsoft has released security bulletin MS14-024. To learn more about this security bulletin: Home users:https://www.microsoft.com/security/pc-security/updates.aspxSkip the details: Download the updates for...

MS14-001: Description of the security update for Word Automation Services in Microsoft SharePoint Server 2013: January 14, 2014

MS14-001: Description of the security update for Word Automation Services in Microsoft SharePoint Server 2013: January 14, 2014 INTRODUCTION Microsoft has released security bulletin MS14-001. To view the complete security bulletin, visit one of the following Microsoft websites: Home...

MS14-024: Description of the security update for Office 2010 Service Pack 1 (SP1) and Service Pack 2 (SP2): May 13, 2014

MS14-024: Description of the security update for Office 2010 Service Pack 1 SP1 and Service Pack 2 SP2: May 13, 2014 INTRODUCTION Microsoft has released security bulletin MS14-024. To learn more about this security bulletin: Home users:https://www.microsoft.com/security/pc-security/updates.aspxSk...

Update Rollup 8 for System Center 2012 R2 Orchestrator

Update Rollup 8 for System Center 2012 R2 Orchestrator Introduction This article describes the issues that are fixed in Update Rollup 8 for Microsoft System Center 2012 R2 Orchestrator. It also contains the installation instructions for Update Rollup 8 for System Center 2012 R2 Orchestrator. Issu...

Update Rollup 8 for System Center 2012 R2 Virtual Machine Manager

Update Rollup 8 for System Center 2012 R2 Virtual Machine Manager Introduction This article describes the issues that are fixed in Update Rollup 8 UR8 for Microsoft System Center 2012 R2 Virtual Machine Manager. There are two updates available for System Center 2012 R2 Virtual Machine Manager: on...

Update Rollup 6 for System Center 2012 R2 Service Reporting

Update Rollup 6 for System Center 2012 R2 Service Reporting Introduction This article describes the issues that are fixed in Update Rollup 6 for Microsoft System Center 2012 R2 Service Reporting. This article also contains the installation instructions for Update Rollup 6 for System Center 2012 R...

Update enables downgrade rights between Windows 10 IoT and Windows Embedded 8.1 Industry

Update enables downgrade rights between Windows 10 IoT and Windows Embedded 8.1 Industry This article describes an update that enables downgrade rights between Windows 10 Internet of Things IoT and Windows Embedded 8.1 Industry. Before you install this update, see the Prerequisites section. About...

MS14-044: Description of the security update for SQL Server 2014 (GDR): August 12, 2014

MS14-044: Description of the security update for SQL Server 2014 GDR: August 12, 2014 Introduction A security issue has been identified in Microsoft SQL Server 2014 that could allow an attacker to compromise your system and gain control over it. You can help protect your computer by installing th...

CVE-2016-4290

When opening a Hangul HShow Document .hpt and processing a structure within the document, Hancom Office 2014 will attempt to allocate space for a block of data within the file. When calculating this length, the application will use a value from the file and add a constant to it without checking...

CVE-2016-4296

When opening a Hangul Hcell Document .cell and processing a record that uses the CSSValFormat object, Hancom Office 2014 will search for an underscore "" character at the end of the string and write a null terminator after it. If the character is at the very end of the string, the application wil...

CVE-2016-4298

When opening a Hangul HShow Document .hpt and processing a structure within the document, Hancom Office 2014 will attempt to allocate space for a list of elements using a length from the file. When calculating this length, an integer overflow can be made to occur which will cause the buffer to be...

CVE-2016-4296

When opening a Hangul Hcell Document .cell and processing a record that uses the CSSValFormat object, Hancom Office 2014 will search for an underscore "" character at the end of the string and write a null terminator after it. If the character is at the very end of the string, the application wil...

CVE-2016-4294

When opening a Hangul Hcell Document .cell and processing a property record within the Workbook stream, Hancom Office 2014 will attempt to allocate space for an element using a length from the file. When copying user-supplied data to this buffer, however, the application will use a different size...

CVE-2016-4294

When opening a Hangul Hcell Document .cell and processing a property record within the Workbook stream, Hancom Office 2014 will attempt to allocate space for an element using a length from the file. When copying user-supplied data to this buffer, however, the application will use a different size...

CVE-2016-4291

When opening a Hangul HShow Document .hpt and processing a structure within the document, Hancom Office 2014 will use a field from the structure in an operation that can cause the integer to overflow. This result is then used to allocate memory to copy file data in. Due to the lack of bounds...

CVE-2016-4292

When opening a Hangul HShow Document .hpt and processing a structure within the document, Hancom Office 2014 will use a static size to allocate a heap buffer yet explicitly trust a size from the file when modifying data inside of it. Due to this, an aggressor can corrupt memory outside the bounds...

CVE-2016-4292

When opening a Hangul HShow Document .hpt and processing a structure within the document, Hancom Office 2014 will use a static size to allocate a heap buffer yet explicitly trust a size from the file when modifying data inside of it. Due to this, an aggressor can corrupt memory outside the bounds...

CVE-2016-4298

When opening a Hangul HShow Document .hpt and processing a structure within the document, Hancom Office 2014 will attempt to allocate space for a list of elements using a length from the file. When calculating this length, an integer overflow can be made to occur which will cause the buffer to be...

CVE-2016-4295

When opening a Hangul Hcell Document .cell and processing a particular record within the Workbook stream, an index miscalculation leading to a heap overlow can be made to occur in Hancom Office 2014. The vulnerability occurs when processing data for a formula used to render a chart via the...