328 matches found
Microsoft Excel CVE-2018-0841 Remote Code Execution Vulnerability
Description Microsoft Excel is prone to a remote code-execution vulnerability. An attacker can leverage this issue to execute arbitrary code in the context of the currently logged-in user. Failed exploit attempts will likely result in denial of service conditions. Technologies Affected Microsoft...
PT-2018-1062
Name of the Vulnerable Software and Affected Versions Microsoft Outlook versions 2007 SP3 through 2016 Microsoft Office 2016 Click-to-Run C2R Description The issue is caused by a buffer overflow in memory, allowing a remote attacker to execute arbitrary code. The vulnerability exists due to how t...
Microsoft Word CVE-2018-0792 Remote Code Execution Vulnerability
Description Microsoft Word is prone to a remote code-execution vulnerability. An attacker can leverage this issue to execute arbitrary code in the context of the currently logged-in user. Failed exploit attempts will likely result in denial of service conditions. Technologies Affected Microsoft...
Microsoft Office CVE-2018-0795 Remote Code Execution Vulnerability
Description Microsoft Office is prone to a remote code-execution vulnerability. An attacker can leverage this issue to execute arbitrary code in the context of the currently logged-in user. Failed exploit attempts will likely result in denial of service conditions. Technologies Affected Microsoft...
CVE-2017-11935
Microsoft Office 2016 Click-to-Run C2R allows a remote code execution vulnerability due to the way files are handled in memory, aka "Microsoft Excel Remote Code Execution Vulnerability"...
CVE-2017-11935
Microsoft Office 2016 Click-to-Run C2R allows a remote code execution vulnerability due to the way files are handled in memory, aka "Microsoft Excel Remote Code Execution Vulnerability"...
CVE-2017-11939
Microsoft Office 2016 Click-to-Run C2R allows an information disclosure vulnerability due to the way Microsoft Office enforces DRM copy/paste permissions, aka "Microsoft Office Information Disclosure Vulnerability"...
CVE-2017-11939
Microsoft Office 2016 Click-to-Run C2R allows an information disclosure vulnerability due to the way Microsoft Office enforces DRM copy/paste permissions, aka "Microsoft Office Information Disclosure Vulnerability"...
CVE-2017-11935
Microsoft Office 2016 Click-to-Run C2R allows a remote code execution vulnerability due to the way files are handled in memory, aka "Microsoft Excel Remote Code Execution Vulnerability"...
Remote code execution
Microsoft Office 2016 Click-to-Run C2R allows a remote code execution vulnerability due to the way files are handled in memory, aka "Microsoft Excel Remote Code Execution Vulnerability"...
CVE-2017-11939
CVE-2017-11939 affects Microsoft Office 2016 (Click-to-Run). The vulnerability is an information-disclosure flaw stemming from DRM copy/paste enforcement, potentially leaking a user’s private data (e.g., private key) from the certificate store or plaintext from DRM-protected emails/drafts. Affect...
CVE-2017-11935
Microsoft Office 2016 Click-to-Run C2R allows a remote code execution vulnerability due to the way files are handled in memory, aka "Microsoft Excel Remote Code Execution Vulnerability"...
CVE-2017-11935
CVE-2017-11935 is a Microsoft Office remote code execution vulnerability affecting Microsoft Excel in Office 2016 Click-to-Run. The issue stems from how Excel/Office handles objects in memory, allowing an attacker to craft an Excel document that triggers the flaw and executes arbitrary code in th...
Microsoft Office Outlook CVE-2017-11939 Information Disclosure Vulnerability
Description Microsoft Office Outlook is prone to an information-disclosure vulnerability. An attacker can leverage this issue to obtain sensitive information that may aid in further attacks. Technologies Affected Microsoft Outlook 2016 Click-to-Run C2R for 32-bit edition Microsoft Outlook 2016...
Microsoft Excel CVE-2017-11935 Remote Code Execution Vulnerability
Description Microsoft Excel is prone to a remote code-execution vulnerability. An attacker can leverage this issue to execute arbitrary code in the context of the currently logged-in user. Failed exploit attempts will likely result in denial of service conditions. Technologies Affected Microsoft...
CVE-2017-11939: Exposure of Sensitive Information to an Unauthorized Actor
Microsoft Office 2016 Click-to-Run C2R allows an information disclosure vulnerability due to the way Microsoft Office enforces DRM copy/paste permissions, aka "Microsoft Office Information Disclosure Vulnerability"...
CVE-2017-11935: Improper Restriction of Operations within the Bounds of a Memory Buffer
Microsoft Office 2016 Click-to-Run C2R allows a remote code execution vulnerability due to the way files are handled in memory, aka "Microsoft Excel Remote Code Execution Vulnerability"...
PT-2017-3528
Name of the Vulnerable Software and Affected Versions: Microsoft Office 2016 Click-to-Run C2R Description: The issue is related to the improper handling of objects in memory, which can lead to remote code execution. This can be achieved by a remote attacker using a specially crafted file...
PT-2017-12317
Name of the Vulnerable Software and Affected Versions Microsoft Office 2016 Click-to-Run C2R affected versions not specified Description The issue is related to an information disclosure problem due to the way Microsoft Office enforces DRM copy/paste permissions. Recommendations At the moment,...
The vulnerability of the Click-to-Run software package from Microsoft Office allows a malicious actor to execute actions on the system with privileges of the current user.
The vulnerability of the Click-to-Run software package from Microsoft Office relates to improper handling of objects in memory, which leads to buffer overflows. Exploiting this vulnerability allows a malicious actor to execute actions on the system with privileges of the current user, using a...