8446 matches found
PT-2017-12281 · Microsoft · Excel Viewer +3
Name of the Vulnerable Software and Affected Versions: Microsoft Excel versions 2007 Service Pack 3 through 2016 Microsoft Office Compatibility Pack version Service Pack 3 Microsoft Excel Viewer version 2007 Service Pack 3 Microsoft Excel 2016 for Mac Description: A security feature bypass issue...
Microsoft Office CVE-2017-11884 Memory Corruption Vulnerability
Description Microsoft Office is prone to a memory-corruption vulnerability. An attacker can leverage this issue to execute arbitrary code in the context of the currently logged-in user. Failed exploit attempts will likely result in denial of service conditions. Technologies Affected Microsoft Exc...
KLA11139 Multiple vulnerabilities in Microsoft Office
Multiple serious vulnerabilities have been found in Microsoft Office. Malicious users can exploit these vulnerabilities to execute arbitrary code, bypass security restrictions and privilege escalations. Below is a complete list of vulnerabilities: 1. Multiple vulnerabilities related to an incorre...
Security Updates for Microsoft Excel Products (November 2017)
The Microsoft Excel Products are missing security updates. It is, therefore, affected by multiple vulnerabilities : - A remote code execution vulnerability exists in Microsoft Office software when the software fails to properly handle objects in memory. An attacker who successfully exploited the...
Microsoft Word CVE-2017-11854 Memory Corruption Vulnerability
Description Microsoft Word is prone to a memory-corruption vulnerability. Attackers can exploit this issue to execute arbitrary code in the context of the currently logged-in user. Failed attacks will cause denial-of-service conditions. Technologies Affected Microsoft Excel 2007 SP3 Microsoft...
Security Update for Microsoft Office (November 2017) (macOS)
The Microsoft Office 2016 application installed on the remote macOS or Mac OS X host is missing a security update. It is, therefore, affected by the following vulnerabilities: - A security feature bypass vulnerability exists in Microsoft Office software by not enforcing macro settings on an Excel...
PT-2017-3277 · Microsoft · Excel Viewer +3
Name of the Vulnerable Software and Affected Versions: Microsoft Excel versions 2007 Service Pack 3 through 2016 Microsoft Office Compatibility Pack version Service Pack 3 Microsoft Excel Viewer version 2007 Service Pack 3 Description: The issue is related to the improper handling of objects in...
Microsoft Excel CVE-2017-11877 Security Bypass Vulnerability
Description Microsoft Excel is prone to a security-bypass vulnerability. An attacker can leverage this issue to bypass certain security restrictions and execute arbitrary code by exploiting another vulnerability in the application. Technologies Affected Microsoft Excel 2007 SP3 Microsoft Excel 20...
Microsoft Excel CVE-2017-11878 Memory Corruption Vulnerability
Description Microsoft Excel is prone to a memory-corruption vulnerability. Attackers can exploit this issue to execute arbitrary code in the context of the currently logged-in user. Failed attacks will cause denial-of-service conditions. Technologies Affected Microsoft Excel 2007 SP3 Microsoft...
PT-2017-3276 · Microsoft · Excel 2016
Name of the Vulnerable Software and Affected Versions: Microsoft Excel 2016 Click-to-Run C2R Description: The issue is related to the improper handling of objects in memory by Microsoft Excel, which can be exploited by a remote attacker to execute arbitrary code in the context of the current user...
Microsoft Excel 'Dynamic Data Exchange (DDE)' Attacks Security Advisory (4053440)
This host is missing an important security update according to Microsoft Security Advisory 4053440. SPDX-FileCopyrightText: 2017 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier:...
November 2, 2017—KB4052231 (OS Build 14393.1797)
None None...
November 2, 2017—KB4052232 (OS Build 10586.1177)
None None...
Null Pointer Reference Vulnerability in RZoffice
SoftZone Office RZoffice is an office software, which is compatible with MS Office and consists of three parts: word processing, spreadsheet and presentation. RZoffice suffers from a null pointer reference vulnerability when handling special xlsx files. An attacker can exploit the vulnerability t...
Memory Corruption Vulnerability in RZoffice
SoftZone Office RZoffice is an office software, which is compatible with MS Office and consists of three parts: word processing, spreadsheet and presentation. RZoffice suffers from a memory corruption vulnerability when processing special xls files. An attacker is allowed to exploit this...
Vulnerability of Microsoft Office software, related to improper handling of objects in memory, allows a hacker to execute arbitrary code.
The vulnerability in Microsoft Office Web Apps servers, the Excel Web App application for browsing Excel spreadsheets in a Microsoft browser, the Microsoft SharePoint Server corporate application suite, the Microsoft Excel spreadsheet editor, the Microsoft Office Compatibility Pack compatibility...
The vulnerability of Microsoft Excel for Mac spreadsheet editors, related to improper handling of objects in memory, allows a hacker to execute arbitrary code.
The vulnerability of Microsoft Excel for Mac spreadsheet editors is related to improper handling of objects in memory. Exploiting this vulnerability allows a remote attacker to execute arbitrary code...
The vulnerability of Microsoft Excel, Microsoft Excel for Mac, and the Microsoft Office Compatibility Pack relates to improper handling of objects in memory, allowing an attacker to gain privileges of the current user.
The vulnerability of Microsoft Excel and Microsoft Excel for Mac editors, as well as the Microsoft Office Web Apps suite and the Microsoft Office Compatibility Pack, is related to incorrect handling of objects in memory. Exploiting this vulnerability can allow a malicious actor, operating remotel...
KeystoneJS 4.0.0-beta.5 Unauthenticated CSV Injection Vulnerability
KeystoneJS version 4.0.0-beta.5 suffers from an unauthenticated CSV injection vulnerability in admin/server/api/download.js and lib/list/getCSVData.js Exploit Title: KeystoneJS 4.0.0-beta.5 Unauthenticated CSV Injection Vendor Homepage: http://keystonejs.com/ Exploit Author: Ishaq Mohammed Contac...
Vulnerability of Microsoft Office software, related to improper handling of objects in memory, allows a hacker to execute arbitrary code.
The vulnerabilities of the Microsoft Office Compatibility Pack, Office Online Server, Microsoft Office Web Apps, Word Viewer and Microsoft Excel Web App, SharePoint applications, Microsoft Word text editor, and Word Automation Services are related to improper handling of objects in memory...