Description of the security update for Office for Mac 2011 14.7.7: September 12, 2017

None None...

Microsoft (MAU) Office Elevation of Privilege Vulnerability

An elevation of privilege vulnerability exists when the Microsoft AutoUpdate MAU application for Mac improperly validates updates before executing them. An attacker who successfully exploited the vulnerability who already has the ability to execute code on a system could elevate privileges. To...

MS16-133: Description of the security update for Office 2016 for Mac: November 15, 2016

None None...

MS16-121: Description of the security update for Office 2016 for Mac: October 11, 2016

None None...

MS16-107: Description of the security update for Office 2016 for Mac: September 13, 2016

None None...

MS16-054: Description of the security update for Office 2016 for Mac: May 10, 2016

None None...

MS15-081: Description of the security update for Office 2016 for Mac: August 11, 2015

Resolves vulnerabilities in Office that could allow remote code execution if a user opens a specially crafted Office file.SummaryThis security update resolves vulnerabilities in Microsoft Office that could allow remote code execution if a user opens a specially crafted Office file. To learn more...

CVE-2015-4674

The autoupdate implementation in TimeDoctor Pro 1.4.72.3 on Windows relies on unsigned installer files that are retrieved without use of SSL, which makes it easier for man-in-the-middle attackers to execute arbitrary code via a crafted file...

Code injection

The autoupdate implementation in TimeDoctor Pro 1.4.72.3 on Windows relies on unsigned installer files that are retrieved without use of SSL, which makes it easier for man-in-the-middle attackers to execute arbitrary code via a crafted file...

CVE-2015-4674

The CVE relates to TimeDoctor Pro (Windows) 1.4.72.3, where the autoupdate mechanism relies on unsigned installer files fetched without SSL, enabling potential MITM manipulation to run arbitrary code. This describes a supply-chain/update integrity flaw in the autoupdate component, with the underl...

CVE-2015-4674

The autoupdate implementation in TimeDoctor Pro 1.4.72.3 on Windows relies on unsigned installer files that are retrieved without use of SSL, which makes it easier for man-in-the-middle attackers to execute arbitrary code via a crafted file...

Creative Software AutoUpdate Engine CTSUEng.ocx ActiveX Control Buffer Overflow (CVE-2008-0955)

A remote code execution vulnerability has been reported inCreative Software AutoUpdate Engine. The vulnerability is due to boundary errors within the AutoUpdate Engine ActiveX control CTSUEng.ocx. A remote attacker can exploit this vulnerability by enticing a user to open a malicious web page...

Creative Software AutoUpdate Engine ActiveX Control Buffer Overflow

No description provided by source. $Id: creativesoftwarecachefolder.rb 9262 2010-05-09 17:45:00Z jduck $ This file is part of the Metasploit Framework and may be subject to redistribution and commercial restrictions. Please see the Metasploit Framework web site for more information on licensing a...

CVE-2014-0838

The AutoUpdate package before 6.4 for IBM Security QRadar SIEM 7.2 MR1 and earlier allows remote attackers to execute arbitrary console commands by leveraging control of the server...

CVE-2014-0837

The AutoUpdate process in IBM Security QRadar SIEM 7.2 MR1 and earlier does not verify X.509 certificates from SSL servers, which allows man-in-the-middle attackers to spoof servers via a crafted certificate...

Design/Logic Flaw

The AutoUpdate package before 6.4 for IBM Security QRadar SIEM 7.2 MR1 and earlier allows remote attackers to execute arbitrary console commands by leveraging control of the server...

Code injection

The AutoUpdate process in IBM Security QRadar SIEM 7.2 MR1 and earlier does not verify X.509 certificates from SSL servers, which allows man-in-the-middle attackers to spoof servers via a crafted certificate...

CVE-2014-0837

The CVE-2014-0837 issue affects IBM QRadar SIEM (and related QRadar components) where the AutoUpdate process does not verify SSL certificates, allowing MITM attackers to spoof the update server and potentially tamper data. Affected products include QRadar SIEM 7.2 MR1 and earlier (QRM/QVM). The r...

CVE-2014-0838

CVE-2014-0838 affects IBM QRadar SIEM: the AutoUpdate component (before 6.4) on QRadar SIEM 7.2 MR1 and earlier allows remote execution of console commands when an attacker can control the update server. Root cause: flaw in the AutoUpdate process that enables arbitrary command execution without l...

CVE-2014-0837

The AutoUpdate process in IBM Security QRadar SIEM 7.2 MR1 and earlier does not verify X.509 certificates from SSL servers, which allows man-in-the-middle attackers to spoof servers via a crafted certificate...