EUVD-2008-7176

Malware in sbrugna...

Description of the Microsoft Office 2008 for Mac 12.1.3 Update

Describes the changes that the Office 2008 for Mac 12.1.3 Update makes to Office 2008 for Mac programs.INTRODUCTIONMicrosoft has released security bulletin MS08-057. This security bulletin contains all the relevant information about the security updates for Microsoft Office 2008 for Mac. To view...

MS Office Outlook Information Disclosure Vulnerability - 2813682 (Mac OS X)

This host is missing an important security update according to Microsoft Bulletin MS13-026. OpenVAS Vulnerability Test $Id: secpodms13-026macosx.nasl 4570 2016-11-18 10:17:05Z antu123 $ MS Office Outlook Information Disclosure Vulnerability - 2813682 Mac OS X Authors: Arun Kallavi Copyright:...

Microsoft Office Remote Code Execution Vulnerabilities - 2720184 (Mac OS X)

This host is missing an important security update according to Microsoft Bulletin MS12-076. OpenVAS Vulnerability Test $Id: secpodms12-076macosx.nasl 5958 2017-04-17 09:02:19Z teissa $ Microsoft Office Remote Code Execution Vulnerabilities - 2720184 Mac OS X Authors: Antu Sanadi Copyright:...

Microsoft Office 2008 SP0 (Mac) - RTF pFragments

Microsoft Office 2008 SP0 Mac - RTF pFragments RTF Pfragments exploit for MAC office 2008 Author Abhishek Lyall - abhilyallatgmaildotcom, infoataslitsecuritydotcom Advanced Hacking Trainings - http://training.aslitsecurity.com Web - http://www.aslitsecurity.com/ Blog -...

Microsoft Office 2008 SP0 (Mac) - RTF pFragments

RTF Pfragments exploit for MAC office 2008 Author Abhishek Lyall - abhilyallatgmaildotcom, infoataslitsecuritydotcom Advanced Hacking Trainings - http://training.aslitsecurity.com Web - http://www.aslitsecurity.com/ Blog - http://www.aslitsecurity.blogspot.com/ Office 2007 for MC SP 0...

Microsoft PowerPoint OfficeArt Shape CVE-2011-3413 Remote Code Execution Vulnerability

Description Microsoft PowerPoint is prone to a remote code-execution vulnerability. An attacker can exploit this issue to execute arbitrary code with the privileges of the currently logged-in user. Technologies Affected Microsoft Office 2008 for Mac Microsoft Office Compatibility Pack 2007...

CVE-2011-0977: Undefined Security Weakness

Use-after-free vulnerability in Microsoft Office XP SP3, Office 2003 SP3, Office 2007 SP2, Office 2004 and 2008 for Mac, and Open XML File Format Converter for Mac allows remote attackers to execute arbitrary code via malformed shape data in the Office drawing file format, aka "Microsoft Office...

Microsoft Office艺术绘图记录解析内存破坏漏洞（MS10-087）

BUGTRAQ ID: 44656 CVE ID: CVE-2010-3334 Microsoft Office是非常流行的办公软件套件。 Office在解析艺术绘图记录时没有充分地执行验证，如果msofbtSp记录指定了某些标志就可以触发内存破坏，导致执行任意代码。 Microsoft Office XP SP3 Microsoft Office for Mac 2011 Microsoft Office 2010 Microsoft Office 2008 for Mac Microsoft Office 2004 for Mac Microsoft Office 2003...

Microsoft Office Art Drawing Record Remote Code Execution Vulnerability

Description Microsoft Office is prone to a remote code-execution vulnerability. An attacker could exploit this issue by enticing a victim to open a malicious Office file. Successfully exploiting this issue would allow the attacker to corrupt memory and execute arbitrary code in the context of the...

VUPEN Security Research - Microsoft Office Excel Formula Record Buffer Overflow Vulnerability (CVE-2010-3231)

VUPEN Security Research - Microsoft Office Excel Formula Record Buffer Overflow Vulnerability CVE-2010-3231 http://www.vupen.com/english/research.php I. BACKGROUND --------------------- Microsoft Office Excel is a powerful tool you can use to create and format spreadsheets, and analyze and share...

Microsoft Word sprmCMajority记录解析栈溢出漏洞（MS10-056）

BUGTRAQ ID: 42136 CVE ID: CVE-2010-1900 Word是微软Office套件中的文字处理工具。 在解析Word文档中的sprmCMajority记录时，由于处理sprmCMajority sprm组没有对参数执行检查，攻击者可以控制写入到栈缓冲区中的数据数量，触发栈溢出。成功利用此漏洞的攻击者可完全控制受影响的系统。 Microsoft Office 2008 for Mac Microsoft Office 2004 for Mac Microsoft Word 2007 SP2 Microsoft Word 2003 SP3 Microsoft Wo...

CVE-2010-1900: Improper Control of Generation of Code

Microsoft Office Word 2002 SP3, 2003 SP3, and 2007 SP2; Microsoft Office 2004 and 2008 for Mac; Open XML File Format Converter for Mac; Office Word Viewer; Office Compatibility Pack for Word, Excel, and PowerPoint 2007 File Formats SP2; and Works 9 do not properly handle malformed records in a Wo...

Microsoft Excel畸形BIFF记录远程代码执行漏洞(MS09-067)

Bugraq ID: 36946 CVE ID：CVE-2009-3130 Microsoft Excel是一款微软开发的电子表格处理程序。 Microsoft Office Excel存在一个远程代码执行漏洞，如果用户打开一个特殊构建的包含畸形的BIFF记录的Excel文件可允许远程代码执行。 成功利用此漏洞允许完全控制受影响系统，攻击者成功利用此漏洞可以以内核权限安装程序；查看，更改或删除数据等。 Microsoft Open XML File Format Converter for Mac Microsoft Office 2008 for Mac Microsoft Offic...

Microsoft Word Record Parsing Remote Stack Buffer Overflow Vulnerability

Description Microsoft Word is prone to a remote stack-buffer overflow vulnerability. Attackers can exploit this issue by enticing victims into opening a specially crafted Word '.doc' file. Successful exploits can allow attackers to execute arbitrary code with the privileges of the user running th...

Design/Logic Flaw

Microsoft Office 2008 for Mac, when running on Macintosh systems that restrict Office access to administrators, does not enforce this restriction for user ID 502, which allows local users with that ID to bypass intended security policy and access Office programs, related to permissions and...

CVE-2008-7217: Undefined Security Weakness

Microsoft Office 2008 for Mac, when running on Macintosh systems that restrict Office access to administrators, does not enforce this restriction for user ID 502, which allows local users with that ID to bypass intended security policy and access Office programs, related to permissions and...

CVE-2009-0549: Improper Control of Generation of Code

Excel in Microsoft Office 2000 SP3, Office XP SP3, Office 2003 SP3, and Office 2004 and 2008 for Mac; Open XML File Format Converter for Mac; and Microsoft Office Excel Viewer 2003 SP3 allow remote attackers to execute arbitrary code via a crafted Excel file with a malformed record object, aka...

CVE-2009-0558: Improper Control of Generation of Code

Array index error in Excel in Microsoft Office 2000 SP3 and Office 2004 and 2008 for Mac, and Open XML File Format Converter for Mac, allows remote attackers to execute arbitrary code via a crafted Excel file with a malformed record object, aka "Array Indexing Memory Corruption Vulnerability."...

Microsoft Word Record Parsing Length Field Remote Stack Buffer Overflow Vulnerability

Description Microsoft Word is prone to a stack-based buffer-overflow vulnerability. An attacker can exploit this issue to execute arbitrary code in the context of the currently logged-in user. Failed exploit attempts will likely result in denial-of-service conditions. Technologies Affected...