CVE-2016-3362: Improper Restriction of Operations within the Bounds of a Memory Buffer

Microsoft Excel 2007 SP3, Excel 2010 SP2, Excel 2013 SP1, Excel 2013 RT SP1, Excel 2016, Office Compatibility Pack SP3, Excel Viewer, Excel Services on SharePoint Server 2007 SP3, Excel Services on SharePoint Server 2010 SP2, Excel Automation Services on SharePoint Server 2013 SP1, and Office...

CVE-2016-3360: Improper Restriction of Operations within the Bounds of a Memory Buffer

Microsoft PowerPoint 2007 SP3, PowerPoint 2010 SP2, PowerPoint 2013 SP1, PowerPoint 2013 RT SP1, PowerPoint 2016 for Mac, Office Compatibility Pack SP3, PowerPoint Viewer, SharePoint Server 2013 SP1, Office Web Apps 2010 SP2, and Office Web Apps Server 2013 SP1 allow remote attackers to execute...

Security Update for Microsoft Office Compatibility Pack Service Pack 3 (KB2597974)

A security vulnerability exists in Microsoft Office Compatibility Pack Service Pack 3 that could allow arbitrary code to run when a maliciously modified file is opened. This update resolves that vulnerability...

September 13, 2016 — KB3189866 (OS Builds 14393.187 and 14393.189)

None None...

PT-2016-2739

Name of the Vulnerable Software and Affected Versions Microsoft Excel versions 2007 SP3 through 2016 Office Compatibility Pack version SP3 Excel Viewer version affected versions not specified Excel Services on SharePoint Server versions 2007 SP3 through 2013 SP1 Excel Automation Services on...

PT-2016-2737

Name of the Vulnerable Software and Affected Versions Microsoft PowerPoint versions 2007 SP3 through 2016 for Mac Office Compatibility Pack version SP3 PowerPoint Viewer affected versions not specified SharePoint Server version 2013 SP1 Office Web Apps versions 2010 SP2 through 2013 SP1 Office We...

PT-2016-2738

Name of the Vulnerable Software and Affected Versions Microsoft Excel versions 2007 SP3 through 2010 SP2 Office Compatibility Pack version SP3 Excel Viewer version affected versions not specified Description The issue is caused by a memory corruption vulnerability that allows remote attackers to...

PT-2016-5439

Name of the Vulnerable Software and Affected Versions Microsoft Excel versions 2007 SP3 through 2016 Office Compatibility Pack version SP3 Excel Viewer affected versions not specified Description The issue allows remote attackers to execute arbitrary code via a crafted document. Multiple remote...

PT-2016-2734

Name of the Vulnerable Software and Affected Versions Microsoft Excel versions 2007 SP3 through 2016 Office Compatibility Pack version SP3 Excel Viewer version affected versions not specified Description The issue is caused by a memory corruption vulnerability in Microsoft Excel, allowing remote...

Microsoft Office CVE-2016-3365 Memory Corruption Vulnerability

Description Microsoft Office is prone to a remote memory-corruption vulnerability because it fails to properly handle objects in memory. An attacker can leverage this issue to execute arbitrary code in the context of the currently logged-in user. Failed exploit attempts will likely result in deni...

PT-2016-2732

Name of the Vulnerable Software and Affected Versions Microsoft Excel versions 2007 SP3 through 2016 Office Compatibility Pack version SP3 Excel Viewer Excel Services on SharePoint Server versions 2007 SP3 through 2013 SP1 Office Online Server Description The issue is caused by a buffer overflow ...

Microsoft Office CVE-2016-3362 Memory Corruption Vulnerability

Description Microsoft Office is prone to a remote memory-corruption vulnerability because it fails to properly handle objects in memory. An attacker can leverage this issue to execute arbitrary code in the context of the currently logged-in user. Failed exploit attempts will likely result in deni...

Microsoft Office CVE-2016-3360 Memory Corruption Vulnerability

Description Microsoft Office is prone to a remote memory-corruption vulnerability because it fails to properly handle objects in memory. An attacker can leverage this issue to execute arbitrary code in the context of the currently logged-in user. Failed exploit attempts will likely result in deni...

Microsoft Windows10 AHCACHE.SYS Remote Denial Of Service

Summary A denial of service vulnerability exists in the AHCACHE.SYS driver. A specially crafted Portable Executable file can cause a bugcheck in the Windows kernel resulting in remote denial of service. Tested Versions Windows 10, AHCACHE.SYS version 10.0.10586.0 Tested on Windows 10 X86 Product...

New Windows Patch Policy At Odds With Acceptable Risk

With Microsoft’s Patch Tuesday release tomorrow, the countdown begins for application developers to button down code ahead of Microsoft’s new servicing model starting in October that could present vulnerability issues for some businesses. “Tomorrow it’s going to be business as usual, but it will...

Important: Red Hat Security Advisory: eap7-jboss-ec2-eap security, bug fix, and enhancement update

An update for eap7-jboss-ec2-eap is now available for Red Hat JBoss Enterprise Application Platform 7.0 for RHEL 6 and Red Hat JBoss Enterprise Application Platform 7.0 for RHEL 7. Red Hat Product Security has rated this update as having a security impact of Important. A Common Vulnerability...

CumulusClips 2.4.1 Code Execution / CSRF / Cross Site Scripting

Exploit Title: CumulusClips Session fixation Google Dork: inurl:/cumulusclips/videos/ Date: 2.09.2016 Exploit Author: kor3k / Aukasz Korczyk Vendor Homepage: http://cumulusclips.org/ Software Link: http://cumulusclips.org/cumulusclips.zip Version: 2.4.1 Tested on: Debian Jessie Description:...

Fedora 23 : ca-certificates (2016-f9e951386e)

This is an update to the Mozilla CA certificates list version 2.9, which has been published as part of Mozilla NSS 3.26. As in previous versions of the ca-certificates package, the CA list has been modified to keep several legacy CAs still trusted for compatibility reasons. Please refer to...

Microsoft Office Compatibility Pack Installed (credentialed check)

Binary data microsoftofficecompatibilitypackinstalled.nbin...

Microsoft Office Compatibility Pack Unsupported Version Detection

According to its self-reported component version numbers, the installation of Microsoft Office Compatibility Pack on the remote host is no longer supported. Lack of support implies that no new security patches for the product will be released by the vendor. As a result, it is likely to contain...