Lucene search
+L

334 matches found

Symantec
Symantec
•added 2017/12/12 12:00 a.m.•52 views

Microsoft Office Outlook CVE-2017-11939 Information Disclosure Vulnerability

Description Microsoft Office Outlook is prone to an information-disclosure vulnerability. An attacker can leverage this issue to obtain sensitive information that may aid in further attacks. Technologies Affected Microsoft Outlook 2016 Click-to-Run C2R for 32-bit edition Microsoft Outlook 2016...

4CVSS6.5AI score0.06278EPSS
SaveExploits0Affected Software1
Rapid7 Vulnerability Database (full)
Rapid7 Vulnerability Database (full)
•added 2017/12/12 12:00 a.m.•9 views

CVE-2017-11939: Exposure of Sensitive Information to an Unauthorized Actor

Microsoft Office 2016 Click-to-Run C2R allows an information disclosure vulnerability due to the way Microsoft Office enforces DRM copy/paste permissions, aka "Microsoft Office Information Disclosure Vulnerability"...

6.5CVSS6.9AI score0.06278EPSS
SaveExploits0References2
Positive Technologies
Positive Technologies
•added 2017/12/12 12:00 a.m.•4 views

PT-2017-12317

Name of the Vulnerable Software and Affected Versions Microsoft Office 2016 Click-to-Run C2R affected versions not specified Description The issue is related to an information disclosure problem due to the way Microsoft Office enforces DRM copy/paste permissions. Recommendations At the moment,...

6.5CVSS0.06278EPSS
SaveExploits0References5
Symantec
Symantec
•added 2017/12/12 12:00 a.m.•54 views

Microsoft Excel CVE-2017-11935 Remote Code Execution Vulnerability

Description Microsoft Excel is prone to a remote code-execution vulnerability. An attacker can leverage this issue to execute arbitrary code in the context of the currently logged-in user. Failed exploit attempts will likely result in denial of service conditions. Technologies Affected Microsoft...

9.3CVSS1.1AI score0.18881EPSS
SaveExploits0Affected Software1
Positive Technologies
Positive Technologies
•added 2017/12/12 12:00 a.m.•5 views

PT-2017-3528

Name of the Vulnerable Software and Affected Versions: Microsoft Office 2016 Click-to-Run C2R Description: The issue is related to the improper handling of objects in memory, which can lead to remote code execution. This can be achieved by a remote attacker using a specially crafted file...

9.3CVSS0.18881EPSS
SaveExploits0References6
BDU FSTEC
BDU FSTEC
•added 2017/12/04 12:00 a.m.•20 views

Click-to-Run Microsoft Office Privilege Escalation

The vulnerability of the Click-to-Run software package from Microsoft Office relates to improper handling of objects in memory, which leads to buffer overflows. Exploiting this vulnerability allows a malicious actor to execute actions on the system with privileges of the current user, using a...

9.3CVSS7.6AI score0.22899EPSS
SaveExploits0References4
CNVD
CNVD
•added 2017/11/16 12:00 a.m.•19 views

Microsoft Excel 2016 Click-to-Run Remote Code Execution Vulnerability

Microsoft Excel 2016 is a spreadsheet processing software in the Office suite of Microsoft Corporation USA.Click-to-Run is one of the updating tools available. A remote code execution vulnerability exists in Microsoft Excel 2016 Click-to-Run that stems from the program failing to properly handle...

9.3CVSS8.2AI score0.09452EPSS
SaveExploits0References1
NVD
NVD
•added 2017/11/15 3:29 a.m.•51 views

CVE-2017-11884

Microsoft Excel 2016 Click-to-Run C2R allows an attacker to run arbitrary code in the context of the current user by failing to properly handle objects in memory, aka "Microsoft Office Memory Corruption Vulnerability". This CVE ID is unique from CVE-2017-11882...

9.3CVSS8.2AI score0.09452EPSS
SaveExploits0References3
osv_cve
osv_cve
•added 2017/11/15 3:29 a.m.•25 views

CVE-2017-11884

Microsoft Excel 2016 Click-to-Run C2R allows an attacker to run arbitrary code in the context of the current user by failing to properly handle objects in memory, aka "Microsoft Office Memory Corruption Vulnerability". This CVE ID is unique from CVE-2017-11882...

7.8CVSS6AI score0.09452EPSS
SaveExploits0References3
attackerkb
attackerkb
•added 2017/11/15 3:29 a.m.•13 views

CVE-2017-11884

Microsoft Excel 2016 Click-to-Run C2R allows an attacker to run arbitrary code in the context of the current user by failing to properly handle objects in memory, aka "Microsoft Office Memory Corruption Vulnerability". This CVE ID is unique from CVE-2017-11882...

9.3CVSS7.8AI score0.99945EPSS
SaveExploits33References4
Prion
Prion
•added 2017/11/15 3:29 a.m.•50 views

Memory corruption

Microsoft Excel 2016 Click-to-Run C2R allows an attacker to run arbitrary code in the context of the current user by failing to properly handle objects in memory, aka "Microsoft Office Memory Corruption Vulnerability". This CVE ID is unique from CVE-2017-11882...

9.3CVSS7.9AI score0.99945EPSS
SaveExploits33References3Affected Software1
Cvelist
Cvelist
•added 2017/11/15 3:00 a.m.•64 views

CVE-2017-11884

Microsoft Excel 2016 Click-to-Run C2R allows an attacker to run arbitrary code in the context of the current user by failing to properly handle objects in memory, aka "Microsoft Office Memory Corruption Vulnerability". This CVE ID is unique from CVE-2017-11882...

8.2AI score0.09452EPSS
SaveExploits0References3
CVE
CVE
•added 2017/11/15 3:00 a.m.•305 views

CVE-2017-11884

Technical details about CVE-2017-11884 are not publicly provided in the connected documents; no specific affected products, versions, exploit vectors, or remediation are disclosed here. Monitor for updates.

9.3CVSS8.3AI score0.09452EPSS
SaveIn wildExploits0References3Affected Software1
Rapid7 Vulnerability Database (full)
Rapid7 Vulnerability Database (full)
•added 2017/11/15 12:00 a.m.•8 views

CVE-2017-11884: Improper Restriction of Operations within the Bounds of a Memory Buffer

Microsoft Excel 2016 Click-to-Run C2R allows an attacker to run arbitrary code in the context of the current user by failing to properly handle objects in memory, aka "Microsoft Office Memory Corruption Vulnerability". This CVE ID is unique from CVE-2017-11882...

9.3CVSS7.6AI score0.09452EPSS
SaveExploits0References2
Symantec
Symantec
•added 2017/11/14 12:00 a.m.•57 views

Microsoft Office CVE-2017-11884 Memory Corruption Vulnerability

Description Microsoft Office is prone to a memory-corruption vulnerability. An attacker can leverage this issue to execute arbitrary code in the context of the currently logged-in user. Failed exploit attempts will likely result in denial of service conditions. Technologies Affected Microsoft Exc...

9.3CVSS1AI score0.09452EPSS
SaveExploits0Affected Software1
Positive Technologies
Positive Technologies
•added 2017/11/14 12:00 a.m.•11 views

PT-2017-3276 · Microsoft · Excel 2016

Name of the Vulnerable Software and Affected Versions: Microsoft Excel 2016 Click-to-Run C2R Description: The issue is related to the improper handling of objects in memory by Microsoft Excel, which can be exploited by a remote attacker to execute arbitrary code in the context of the current user...

9.3CVSS8.3AI score0.09452EPSS
SaveExploits0References8
NVD
NVD
•added 2017/10/13 1:29 p.m.•40 views

CVE-2017-11825

Microsoft Office 2016 Click-to-Run C2R and Microsoft Office 2016 for Mac allow an attacker to use a specially crafted file to perform actions in the security context of the current user, due to how Microsoft Office handles files in memory, aka "Microsoft Office Remote Code Execution Vulnerability...

9.3CVSS7.7AI score0.22899EPSS
SaveExploits0References3
Cvelist
Cvelist
•added 2017/10/13 1:00 p.m.•46 views

CVE-2017-11825

Microsoft Office 2016 Click-to-Run C2R and Microsoft Office 2016 for Mac allow an attacker to use a specially crafted file to perform actions in the security context of the current user, due to how Microsoft Office handles files in memory, aka "Microsoft Office Remote Code Execution Vulnerability...

7.9AI score0.22899EPSS
SaveExploits0References3
Rapid7 Vulnerability Database (full)
Rapid7 Vulnerability Database (full)
•added 2017/10/13 12:00 a.m.•8 views

CVE-2017-11825: Improper Restriction of Operations within the Bounds of a Memory Buffer

Microsoft Office 2016 Click-to-Run C2R and Microsoft Office 2016 for Mac allow an attacker to use a specially crafted file to perform actions in the security context of the current user, due to how Microsoft Office handles files in memory, aka "Microsoft Office Remote Code Execution Vulnerability...

9.3CVSS7.5AI score0.22899EPSS
SaveExploits0References2
Positive Technologies
Positive Technologies
•added 2017/10/10 12:00 a.m.•8 views

PT-2017-3123

Name of the Vulnerable Software and Affected Versions Microsoft Office 2016 Click-to-Run C2R Microsoft Office 2016 for Mac Description The issue is related to how Microsoft Office handles files in memory, allowing an attacker to use a specially crafted file to perform actions in the security...

9.3CVSS0.22899EPSS
SaveExploits0References6
Rows per page
Query Builder