MS17-014: Description of the security update for Excel Services on SharePoint Server 2010: March 14, 2017

MS17-014: Description of the security update for Excel Services on SharePoint Server 2010: March 14, 2017 Summary This security update resolves vulnerabilities in Microsoft Office that could allow remote code execution if a user opens a specially crafted Office file. To learn more about these...

MS17-014: Description of the security update for Excel 2010: March 14, 2017

MS17-014: Description of the security update for Excel 2010: March 14, 2017 Summary This security update resolves vulnerabilities in Microsoft Office that could allow remote code execution if a user opens a specially crafted Office file. To learn more about these vulnerabilities, see Microsoft...

Microsoft Office CVE-2017-0027 Information Disclosure Vulnerability

Description Microsoft Office is prone to an information-disclosure vulnerability. Attackers can exploit this issue to obtain sensitive information that may aid in further attacks. Technologies Affected Microsoft Excel 2007 SP3 Microsoft Excel 2010 Service Pack 2 32-bit editions Microsoft Excel 20...

Microsoft Office CVE-2017-0006 Memory Corruption Vulnerability

Description Microsoft Office is prone to a remote memory-corruption vulnerability. An attacker can leverage this issue to execute arbitrary code in the context of the currently logged-in user. Failed exploit attempts will likely result in denial of service conditions. Technologies Affected...

Microsoft Office CVE-2017-0020 Memory Corruption Vulnerability

Description Microsoft Office is prone to a remote memory-corruption vulnerability. An attacker can leverage this issue to execute arbitrary code in the context of the currently logged-in user. Failed exploit attempts will likely result in denial of service conditions. Technologies Affected...

Microsoft Office CVE-2017-0052 Memory Corruption Vulnerability

Description Microsoft Office is prone to a remote memory-corruption vulnerability. An attacker can leverage this issue to execute arbitrary code in the context of the currently logged-in user. Failed exploit attempts will likely result in denial of service conditions. Technologies Affected...

Ichitaro Office Excel File Code Execution Vulnerability

Summary A vulnerability was discovered within the Ichitaro word processor. Ichitaro is published by JustSystems and is considered one of the more popular word processors used within Japan. Ichitaro handles Microsoft Excel’s .xls file format. When processing a record type of 0x3c from a Workbook...

CVE-2017-2790

When processing a record type of 0x3c from a Workbook stream from an Excel file .xls, JustSystems Ichitaro Office trusts that the size is greater than zero, subtracts one from the length, and uses this result as the size for a memcpy. This results in a heap-based buffer overflow and can lead to...

Heap overflow

When processing a record type of 0x3c from a Workbook stream from an Excel file .xls, JustSystems Ichitaro Office trusts that the size is greater than zero, subtracts one from the length, and uses this result as the size for a memcpy. This results in a heap-based buffer overflow and can lead to...

CVE-2017-2790

When processing a record type of 0x3c from a Workbook stream from an Excel file .xls, JustSystems Ichitaro Office trusts that the size is greater than zero, subtracts one from the length, and uses this result as the size for a memcpy. This results in a heap-based buffer overflow and can lead to...

CVE-2017-2790

CVE-2017-2790 affects JustSystems Ichitaro Office (Excel .xls handling). A heap-based buffer overflow arises when processing a Workbook record type 0x3c: the code reads a size, subtracts one, and uses the result as the memcpy length. An unchecked integer underflow (size becomes 0xffff) can be tri...

DEBIAN-CVE-2017-5992

Openpyxl 2.4.1 resolves external entities by default, which allows remote attackers to conduct XXE attacks via a crafted .xlsx document...

PYSEC-2017-48

Openpyxl 2.4.1 resolves external entities by default, which allows remote attackers to conduct XXE attacks via a crafted .xlsx document...

PYSEC-2017-48

Openpyxl 2.4.1 resolves external entities by default, which allows remote attackers to conduct XXE attacks via a crafted .xlsx document...

Honeywell Excel Web Detection (BACnet)

BACnet based detection of Honeywell Excel Web. SPDX-FileCopyrightText: 2017 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only if description...

FullContact BB #2 - CSV Excel Macro Injection Vulnerability

Document Title: =============== FullContact BB 2 - CSV Excel Macro Injection Vulnerability References Source: ==================== http://www.vulnerability-lab.com/getcontent.php?id=1904 Release Date: ============= 2017-01-19 Vulnerability Laboratory ID VL-ID: ====================================...

MS11-072: Description of the security update for Excel Services in SharePoint Server 2010: September 13, 2011

MS11-072: Description of the security update for Excel Services in SharePoint Server 2010: September 13, 2011 Microsoft has released security bulletin MS11-072. To view the complete security bulletin, visit one of the following Microsoft websites: Home users:...

MS11-045: Description of the security update for Excel 2010: June 14, 2011

MS11-045: Description of the security update for Excel 2010: June 14, 2011 Introduction Microsoft has released security bulletin MS11-045. To view the complete security bulletin, visit one of the following Microsoft websites: Home...

MS11-021: Description of the security update for Excel 2010: April 12, 2011

MS11-021: Description of the security update for Excel 2010: April 12, 2011 Introduction Microsoft has released security bulletin MS11-021. To view the complete security bulletin, visit one of the following Microsoft websites: Home...

MS11-072: Description of the security update for Excel 2007: September 13, 2011

MS11-072: Description of the security update for Excel 2007: September 13, 2011 Microsoft has released security bulletin MS11-072. To view the complete security bulletin, visit one of the following Microsoft websites: Home users:...