Microsoft Office Graphics Remote Code Execution Vulnerability

...

KLA12175 Multiple vulnerabilities in Microsoft Office

Multiple vulnerabilities were found in Microsoft Office. Malicious users can exploit these vulnerabilities to execute arbitrary code, spoof user interface, obtain sensitive information. Below is a complete list of vulnerabilities: 1. A remote code execution vulnerability in Microsoft SharePoint c...

PT-2021-3143 · Microsoft · 365 Apps For Enterprise +3

Name of the Vulnerable Software and Affected Versions: Microsoft Office Graphics affected versions not specified Microsoft 365 Apps for Enterprise affected versions not specified Microsoft Word affected versions not specified Description: The issue is related to incorrect code generation manageme...

Vulnerability of the graphical components of the Microsoft Office software suite, allowing a hacker to execute arbitrary code

The vulnerability of Microsoft Office’s graphical components is related to errors in object handling in memory. Exploiting this vulnerability allows a malicious actor to execute arbitrary code using a specially created file from a remote location...

October 9, 2018—KB4463097 (Monthly Rollup)

None None...

October 9, 2018—KB4463104 (Security-only update)

None None...

The vulnerability of the Office Graphics component in the Microsoft Office software suite allows a hacker to execute arbitrary code.

The vulnerability of the Office Graphics component in the Microsoft Office software suite is related to code generation errors. Exploiting this vulnerability allows a malicious actor to execute arbitrary code using specially crafted embedded fonts from within the software...

CVE-2018-1028

A remote code execution vulnerability exists when the Office graphics component improperly handles specially crafted embedded fonts, aka "Microsoft Office Graphics Remote Code Execution Vulnerability." This affects Word, Microsoft Office, Microsoft SharePoint, Excel, Microsoft SharePoint Server...

Security Updates for Microsoft Office Web Apps (April 2018)

The Microsoft Office Web Apps installation on the remote host is missing a security update. It is, therefore, affected by the following vulnerability : - A remote code execution vulnerability exists when the Office graphics component improperly handles specially crafted embedded fonts. An attacke...

CVE-2016-0183

The Windows font library in Microsoft Office 2010 SP2, Word 2010 SP2, Word Automation Services on SharePoint Server 2010 SP2, and Office Web Apps 2010 SP2 allows remote attackers to execute arbitrary code via a crafted embedded font, aka "Microsoft Office Graphics RCE Vulnerability."...

CVE-2015-2431

Microsoft Office 2007 SP3 and 2010 SP2, Live Meeting 2007 Console, Lync 2010, Lync 2010 Attendee, Lync 2013 SP1, and Lync Basic 2013 SP1 allow remote attackers to execute arbitrary code via a crafted Office Graphics Library OGL font, aka "Microsoft Office Graphics Component Remote Code Execution...

CVE-2015-2431

Microsoft Office 2007 SP3 and 2010 SP2, Live Meeting 2007 Console, Lync 2010, Lync 2010 Attendee, Lync 2013 SP1, and Lync Basic 2013 SP1 allow remote attackers to execute arbitrary code via a crafted Office Graphics Library OGL font, aka "Microsoft Office Graphics Component Remote Code Execution...

MS15-080 : Vulnerabilities in Microsoft Graphics Component Could Allow Remote Code Execution (3078662)

The remote Windows host is affected by multiple vulnerabilities : - Multiple remote code execution vulnerabilities exist due to the Windows Adobe Type Manager Library not properly handling specially crafted OpenType fonts. An attacker can exploit these, by using a crafted document or web page wit...