CVE-2017-11884

Technical details about CVE-2017-11884 are not publicly provided in the connected documents; no specific affected products, versions, exploit vectors, or remediation are disclosed here. Monitor for updates.

CVE-2017-11884: Improper Restriction of Operations within the Bounds of a Memory Buffer

Microsoft Excel 2016 Click-to-Run C2R allows an attacker to run arbitrary code in the context of the current user by failing to properly handle objects in memory, aka "Microsoft Office Memory Corruption Vulnerability". This CVE ID is unique from CVE-2017-11882...

PT-2017-3276 · Microsoft · Excel 2016

Name of the Vulnerable Software and Affected Versions: Microsoft Excel 2016 Click-to-Run C2R Description: The issue is related to the improper handling of objects in memory by Microsoft Excel, which can be exploited by a remote attacker to execute arbitrary code in the context of the current user...

Microsoft Office CVE-2017-11884 Memory Corruption Vulnerability

Description Microsoft Office is prone to a memory-corruption vulnerability. An attacker can leverage this issue to execute arbitrary code in the context of the currently logged-in user. Failed exploit attempts will likely result in denial of service conditions. Technologies Affected Microsoft Exc...

CVE-2017-11825

Microsoft Office 2016 Click-to-Run C2R and Microsoft Office 2016 for Mac allow an attacker to use a specially crafted file to perform actions in the security context of the current user, due to how Microsoft Office handles files in memory, aka "Microsoft Office Remote Code Execution Vulnerability...

CVE-2017-11825

Microsoft Office 2016 Click-to-Run C2R and Microsoft Office 2016 for Mac allow an attacker to use a specially crafted file to perform actions in the security context of the current user, due to how Microsoft Office handles files in memory, aka "Microsoft Office Remote Code Execution Vulnerability...

CVE-2017-11825: Improper Restriction of Operations within the Bounds of a Memory Buffer

Microsoft Office 2016 Click-to-Run C2R and Microsoft Office 2016 for Mac allow an attacker to use a specially crafted file to perform actions in the security context of the current user, due to how Microsoft Office handles files in memory, aka "Microsoft Office Remote Code Execution Vulnerability...

PT-2017-3123

Name of the Vulnerable Software and Affected Versions Microsoft Office 2016 Click-to-Run C2R Microsoft Office 2016 for Mac Description The issue is related to how Microsoft Office handles files in memory, allowing an attacker to use a specially crafted file to perform actions in the security...

Microsoft Office CVE-2017-11825 Remote Code Execution Vulnerability

Description Microsoft Office is prone to a remote code-execution vulnerability. An attacker can leverage this issue to execute arbitrary code in the context of the currently logged-in user. Failed exploit attempts will likely result in denial of service conditions. Technologies Affected Microsoft...

Microsoft Office 2013 APP-V ASLR Bypass Vulnerability (3118268)

This host is missing a critical security update according to Microsoft Bulletin MS16-107. This VT has been deprecated and replaced by the VT SPDX-FileCopyrightText: 2017 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right...

Microsoft Releases Outlook Patches, Fixes Broken Update

During the heat of Black Hat last week, Microsoft pushed out patches for Outlook that address three newly reported vulnerabilities. Last week’s update also included fixes for six of eight vulnerabilities left unpatched after issues were reported with the June Patch Tuesday update. The most seriou...

Microsoft Office ASLR Bypass

The vulnerability of the Click-to-Run package for Microsoft Office programs is related to security configuration errors. Exploiting this vulnerability allows a malicious actor to bypass the ASLR protection mechanism by using a specially created application...

Microsoft APP-V ASLR Information Disclosure Vulnerability

Microsoft Office is an office software suite of products developed by the U.S. company Microsoft Microsoft. Commonly used components are Word, Excel, Access, Powerpoint, FrontPage and so on. An information disclosure vulnerability exists in the Click-to-Run implementation in Microsoft Office...

Security feature bypass

The Click-to-Run C2R implementation in Microsoft Office 2013 SP1 and 2016 allows local users to bypass the ASLR protection mechanism via a crafted application, aka "Microsoft APP-V ASLR Bypass."...

CVE-2016-0137

The Click-to-Run C2R implementation in Microsoft Office 2013 SP1 and 2016 allows local users to bypass the ASLR protection mechanism via a crafted application, aka "Microsoft APP-V ASLR Bypass."...

CVE-2016-0137: Undefined Security Weakness

The Click-to-Run C2R implementation in Microsoft Office 2013 SP1 and 2016 allows local users to bypass the ASLR protection mechanism via a crafted application, aka "Microsoft APP-V ASLR Bypass."...

PT-2016-2769

Name of the Vulnerable Software and Affected Versions Microsoft Office versions 2013 SP1 through 2016 Description The issue is related to errors in security settings in the Click-to-Run C2R implementation of Microsoft Office, allowing a remote attacker to bypass the Address Space Layout...

September 6, 2016, update for Office 2016 (KB3115276)

September 6, 2016, update for Office 2016 KB3115276 Applies To Office Home and Business 2016 Office Home and Student 2016 Office Professional 2016 Office Professional Plus 2016 Office Standard 2016 This article describes update KB3115276 for Microsoft Office 2016, which was released on September ...

March 8, 2016, update for Office 2016 (KB3114849)

March 8, 2016, update for Office 2016 KB3114849 Applies To Office Home and Business 2016 Office Home and Student 2016 Office Professional 2016 Office Professional Plus 2016 Office Standard 2016 This article describes update KB3114849 for Microsoft Office 2016, which was released on March 8, 2016...

Description of the Office Web Apps Server update: April 9, 2013 (KB2738048)

Description of the Office Web Apps Server update: April 9, 2013 KB2738048 Applies To Office Web Apps Server 2013 INTRODUCTION Microsoft has released an update for Microsoft Office Web Apps Server. This update provides the latest fixes for Office Web Apps Server. Additionally, this update contains...