Memory corruption

Microsoft Word 2007 SP3, Office 2010 SP2, Word 2010 SP2, Word 2013 SP1, Word 2013 RT SP1, Word for Mac 2011, Word 2016 for Mac, Office Compatibility Pack SP3, and Word Viewer allow remote attackers to execute arbitrary code via a crafted Office document, aka "Microsoft Office Memory Corruption...

CVE-2016-3282

Microsoft Word 2007 SP3, Office 2010 SP2, Word 2010 SP2, Word 2013 SP1, Word 2013 RT SP1, Word 2016, Word for Mac 2011, Word 2016 for Mac, Office Compatibility Pack SP3, Word Viewer, Word Automation Services on SharePoint Server 2010 SP2, Word Automation Services on SharePoint Server 2013 SP1,...

CVE-2016-3280: Improper Restriction of Operations within the Bounds of a Memory Buffer

Microsoft Word 2007 SP3, Office 2010 SP2, Word 2010 SP2, Word 2013 SP1, Word 2013 RT SP1, Word for Mac 2011, Word 2016 for Mac, Office Compatibility Pack SP3, and Word Viewer allow remote attackers to execute arbitrary code via a crafted Office document, aka "Microsoft Office Memory Corruption...

CVE-2016-3284: Improper Restriction of Operations within the Bounds of a Memory Buffer

Microsoft Excel 2007 SP3, Excel 2010 SP2, Excel 2013 SP1, Excel 2013 RT SP1, Excel 2016, Excel for Mac 2011, Excel 2016 for Mac, Office Compatibility Pack SP3, and Excel Viewer allow remote attackers to execute arbitrary code via a crafted Office document, aka "Microsoft Office Memory Corruption...

Microsoft Office Compatibility Pack Multiple RCE Vulnerabilities (3170008)

This host is missing an important security update according to Microsoft Bulletin MS16-088. SPDX-FileCopyrightText: 2016 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only...

[SECURITY] Fedora 24 Update: python3-3.5.1-12.fc24

Python 3 is a new version of the language that is incompatible with the 2.x line of releases. The language is mostly the same, but many details, especi ally how built-in objects like dictionaries and strings work, have changed considerably, and a lot of deprecated features have finally been remov...

MS16-088: Description of the security update for Excel 2016: July 12, 2016

None None...

PT-2016-2484

Name of the Vulnerable Software and Affected Versions Microsoft Office versions 2007 SP3 through 2016 for Mac Microsoft Word versions 2007 SP3 through 2016 for Mac Word Viewer version not specified Office Compatibility Pack version SP3 Description The issue is caused by a buffer overflow in...

PT-2016-2480

Name of the Vulnerable Software and Affected Versions Microsoft Excel versions 2007 SP3 through 2016 Microsoft Excel for Mac versions 2011 through 2016 Office Compatibility Pack version SP3 Excel Viewer affected versions not specified Description The issue is caused by a buffer overflow in...

Microsoft Office CVE-2016-3282 Memory Corruption Vulnerability

Description Microsoft Office is prone to a remote memory-corruption vulnerability because it fails to properly handle objects in memory. An attacker can leverage this issue to execute arbitrary code in the context of the currently logged-in user. Failed exploit attempts will likely result in deni...

Receiver for Mac Support on macOS Sierra (macOS 10.12) Beta Builds

This article is intended for Citrix administrators and technical teams only. Non-admin users must contact their company’s Help Desk/IT support team and can refer to CTX297149 for more information. The Citrix Receiver for Mac team is working on product updates to support the upcoming release ofmac...

Xen Hypervisor DoS

The vulnerability of the compatiret function in Xen supervisors is related to resource management errors. Exploiting this vulnerability can allow a malicious actor, operating locally, to trigger a service failure by calling the hypercalliret function with the EFLAGS.VM parameter set...

Microsoft Office Compatibility Pack Code Execution

The vulnerability of the Microsoft Office Compatibility Pack is related to incorrect data processing. Exploiting this vulnerability allows a malicious actor to execute arbitrary code using a specially crafted document from a remote location...

Microsoft Office Compatibility Pack Code Execution

The vulnerability of the Microsoft Office Compatibility Pack is related to incorrect data processing. Exploiting this vulnerability allows a malicious actor to execute arbitrary code using a specially crafted document from a remote location...

Microsoft Office Compatibility Pack Data Compromise

The vulnerability of the Microsoft Lync Attendee User allows for the execution of code remotely. If a user entering the system has administrator privileges, a malicious individual can gain full control over the system. They can then install programs, view, modify, or delete data, as well as creat...

Word Viewer Information Disclosure

The vulnerability in the Word Viewer, a component of the Microsoft SharePoint Server corporate application suite, as well as the Microsoft Office Web Apps and Microsoft Office Compatibility Pack, affects text editors like Microsoft Word. These vulnerabilities stem from a lack of protection for...

Microsoft Office Compatibility Pack Excel Code Execution

The vulnerability of the Microsoft Office Compatibility Pack and the Microsoft Excel spreadsheet editor is due to buffer overflow. Exploiting this vulnerability allows a malicious actor to execute arbitrary code using a specially crafted Office document from a remote location...

Ubuntu 16.04 LTS : Linux kernel (Qualcomm Snapdragon) vulnerabilities (USN-3016-3)

The remote Ubuntu 16.04 LTS host has a package installed that is affected by multiple vulnerabilities as referenced in the USN-3016-3 advisory. Jesse Hertz and Tim Newsham discovered that the Linux netfilter implementation did not correctly perform validation when handling 32 bit compatibility...

Ubuntu 14.04 LTS : Linux kernel vulnerabilities (USN-3018-1)

The remote Ubuntu 14.04 LTS host has a package installed that is affected by multiple vulnerabilities as referenced in the USN-3018-1 advisory. Jesse Hertz and Tim Newsham discovered that the Linux netfilter implementation did not correctly perform validation when handling 32 bit compatibility...

Ubuntu 14.04 LTS : Linux kernel (Wily HWE) vulnerabilities (USN-3017-3)

The remote Ubuntu 14.04 LTS host has a package installed that is affected by multiple vulnerabilities as referenced in the USN-3017-3 advisory. USN-3017-1 fixed vulnerabilities in the Linux kernel for Ubuntu 15.10. This update provides the corresponding updates for the Linux Hardware Enablement H...