80 matches found
PT-2021-3292 · Microsoft · Office Graphics +1
Name of the Vulnerable Software and Affected Versions: Microsoft Office Graphics affected versions not specified Description: The issue is related to incorrect code generation management in the Microsoft Office Graphics component. This can allow a remote attacker to execute arbitrary code...
PT-2021-3295 · Microsoft · Office Graphics +1
Name of the Vulnerable Software and Affected Versions: Microsoft Office Graphics affected versions not specified Description: The issue is related to a use-after-free vulnerability in the Microsoft Office Graphics component, which can be exploited by remote attackers to execute arbitrary code. Th...
Microsoft Office Code Execution
The vulnerability of components of the Microsoft Office Graphics package, Microsoft Office, Microsoft 365 Apps for Enterprise, and Microsoft Word is related to improper code generation management. Exploiting this vulnerability can allow an attacker to execute arbitrary code by opening a specially...
CVE-2021-31180
Microsoft Office Graphics Remote Code Execution Vulnerability...
Microsoft Office Graphics Remote Code Execution Vulnerability
...
Description of the security update for Word 2013: May 11, 2021 (KB5001931)
Description of the security update for Word 2013: May 11, 2021 KB5001931 Summary This security update resolves a Microsoft Office Graphics remote code execution vulnerability. To learn more about the vulnerability, see Microsoft Common Vulnerabilities and Exposures CVE-2021-31180. Note: To apply...
PT-2021-3143 · Microsoft · 365 Apps For Enterprise +3
Name of the Vulnerable Software and Affected Versions: Microsoft Office Graphics affected versions not specified Microsoft 365 Apps for Enterprise affected versions not specified Microsoft Word affected versions not specified Description: The issue is related to incorrect code generation manageme...
KLA12175 Multiple vulnerabilities in Microsoft Office
Multiple vulnerabilities were found in Microsoft Office. Malicious users can exploit these vulnerabilities to execute arbitrary code, spoof user interface, obtain sensitive information. Below is a complete list of vulnerabilities: 1. A remote code execution vulnerability in Microsoft SharePoint c...
Microsoft Office Graphical Component Code Execution
The vulnerability of Microsoft Office’s graphical components is related to errors in object handling in memory. Exploiting this vulnerability allows a malicious actor to execute arbitrary code using a specially created file from a remote location...
October 9, 2018—KB4463097 (Monthly Rollup)
None None...
October 9, 2018—KB4463104 (Security-only update)
None None...
Office Graphics Component Code Execution
The vulnerability of the Office Graphics component in the Microsoft Office software suite is related to code generation errors. Exploiting this vulnerability allows a malicious actor to execute arbitrary code using specially crafted embedded fonts from within the software...
CVE-2018-1028
A remote code execution vulnerability exists when the Office graphics component improperly handles specially crafted embedded fonts, aka "Microsoft Office Graphics Remote Code Execution Vulnerability." This affects Word, Microsoft Office, Microsoft SharePoint, Excel, Microsoft SharePoint Server...
Security Updates for Microsoft Office Web Apps (April 2018)
The Microsoft Office Web Apps installation on the remote host is missing a security update. It is, therefore, affected by the following vulnerability : - A remote code execution vulnerability exists when the Office graphics component improperly handles specially crafted embedded fonts. An attacke...
CVE-2016-0183
The Windows font library in Microsoft Office 2010 SP2, Word 2010 SP2, Word Automation Services on SharePoint Server 2010 SP2, and Office Web Apps 2010 SP2 allows remote attackers to execute arbitrary code via a crafted embedded font, aka "Microsoft Office Graphics RCE Vulnerability."...
CVE-2015-2431
Microsoft Office 2007 SP3 and 2010 SP2, Live Meeting 2007 Console, Lync 2010, Lync 2010 Attendee, Lync 2013 SP1, and Lync Basic 2013 SP1 allow remote attackers to execute arbitrary code via a crafted Office Graphics Library OGL font, aka "Microsoft Office Graphics Component Remote Code Execution...
CVE-2015-2431
Microsoft Office 2007 SP3 and 2010 SP2, Live Meeting 2007 Console, Lync 2010, Lync 2010 Attendee, Lync 2013 SP1, and Lync Basic 2013 SP1 allow remote attackers to execute arbitrary code via a crafted Office Graphics Library OGL font, aka "Microsoft Office Graphics Component Remote Code Execution...
CVE-2015-2431: Improper Input Validation
Microsoft Office 2007 SP3 and 2010 SP2, Live Meeting 2007 Console, Lync 2010, Lync 2010 Attendee, Lync 2013 SP1, and Lync Basic 2013 SP1 allow remote attackers to execute arbitrary code via a crafted Office Graphics Library OGL font, aka "Microsoft Office Graphics Component Remote Code Execution...
MS15-080 : Vulnerabilities in Microsoft Graphics Component Could Allow Remote Code Execution (3078662)
The remote Windows host is affected by multiple vulnerabilities : - Multiple remote code execution vulnerabilities exist due to the Windows Adobe Type Manager Library not properly handling specially crafted OpenType fonts. An attacker can exploit these, by using a crafted document or web page wit...
PT-2015-5743
Name of the Vulnerable Software and Affected Versions Microsoft Office versions 2007 SP3 through 2010 SP2 Live Meeting 2007 Console version Lync 2010 version Lync 2010 Attendee version Lync 2013 version SP1 Lync Basic 2013 version SP1 Description A remote code execution issue exists due to improp...