Microsoft Office 365 (2016 Click-to-Run) Multiple Vulnerabilities (Dec 2022)

This host is missing a critical security update according to Microsoft Office Click-to-Run updates SPDX-FileCopyrightText: 2022 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier:...

CVE-2018-0903

Microsoft Access 2010 SP2, Microsoft Access 2013 SP1, Microsoft Access 2016, and Microsoft Office 2016 Click-to-Run allow a remote code execution vulnerability due to how objects are handled in memory, aka "Microsoft Access Remote Code Execution Vulnerability"...

PT-2018-9141

Name of the Vulnerable Software and Affected Versions: Microsoft Excel versions 2007 SP3 through 2016 Microsoft Office versions 2016 Click-to-Run and 2016 for Mac Description: A security feature bypass issue exists due to how macro settings are enforced in Microsoft Office software, specifically...

CVE-2018-0841: Undefined Security Weakness

Microsoft Office 2016 Click-to-Run allows a remote code execution vulnerability due to how objects are handled in memory, aka "Office Remote Code Execution Vulnerability"...

CVE-2018-0851: Out-of-bounds Write

Microsoft Office 2007 SP2, Microsoft Office Word Viewer, Microsoft Office 2010 SP2, Microsoft Office 2013 SP1 and RT SP1, Microsoft Office 2016, and Microsoft Office 2016 Click-to-Run C2R allow a remote code execution vulnerability, due to how Office handles objects in memory, aka "Microsoft Offi...

CVE-2018-0853: Improper Initialization

Microsoft Office 2010 SP2, Microsoft Office 2013 SP1 and RT SP1, Microsoft Office 2016, and Microsoft Office 2016 Click-to-Run C2R allow an information disclosure vulnerability, due to how Office initializes the affected variable, aka "Microsoft Office Information Disclosure Vulnerability"...

PT-2018-9100

Name of the Vulnerable Software and Affected Versions: Microsoft Office 2016 Click-to-Run affected versions not specified Microsoft Office Excel affected versions not specified Description: The issue is related to how objects are handled in memory, which can lead to remote code execution. This is...

Microsoft Excel CVE-2018-0841 Remote Code Execution Vulnerability

Description Microsoft Excel is prone to a remote code-execution vulnerability. An attacker can leverage this issue to execute arbitrary code in the context of the currently logged-in user. Failed exploit attempts will likely result in denial of service conditions. Technologies Affected Microsoft...

PT-2018-9106

Name of the Vulnerable Software and Affected Versions: Microsoft Outlook versions 2007 through 2016 Microsoft Office 2016 Click-to-Run Description: The issue arises from insufficient validation of incoming message formats. An attacker could exploit this to force Outlook to load a local or remote...

PT-2018-1062

Name of the Vulnerable Software and Affected Versions Microsoft Outlook versions 2007 SP3 through 2016 Microsoft Office 2016 Click-to-Run C2R Description The issue is caused by a buffer overflow in memory, allowing a remote attacker to execute arbitrary code. The vulnerability exists due to how t...

CVE-2017-11935

Microsoft Office 2016 Click-to-Run C2R allows a remote code execution vulnerability due to the way files are handled in memory, aka "Microsoft Excel Remote Code Execution Vulnerability"...

CVE-2017-11935: Improper Restriction of Operations within the Bounds of a Memory Buffer

Microsoft Office 2016 Click-to-Run C2R allows a remote code execution vulnerability due to the way files are handled in memory, aka "Microsoft Excel Remote Code Execution Vulnerability"...

PT-2017-12317

Name of the Vulnerable Software and Affected Versions Microsoft Office 2016 Click-to-Run C2R affected versions not specified Description The issue is related to an information disclosure problem due to the way Microsoft Office enforces DRM copy/paste permissions. Recommendations At the moment,...

PT-2017-3528

Name of the Vulnerable Software and Affected Versions: Microsoft Office 2016 Click-to-Run C2R Description: The issue is related to the improper handling of objects in memory, which can lead to remote code execution. This can be achieved by a remote attacker using a specially crafted file...

CVE-2017-11825: Improper Restriction of Operations within the Bounds of a Memory Buffer

Microsoft Office 2016 Click-to-Run C2R and Microsoft Office 2016 for Mac allow an attacker to use a specially crafted file to perform actions in the security context of the current user, due to how Microsoft Office handles files in memory, aka "Microsoft Office Remote Code Execution Vulnerability...

PT-2017-3123

Name of the Vulnerable Software and Affected Versions Microsoft Office 2016 Click-to-Run C2R Microsoft Office 2016 for Mac Description The issue is related to how Microsoft Office handles files in memory, allowing an attacker to use a specially crafted file to perform actions in the security...