SoftZone Office suffers from a denial of service vulnerability (CNVD-2018-06120)

SoftZone Office RZoffice is an office software, which is compatible with MS Office and consists of three parts: word processing, spreadsheet and presentation. A denial-of-service vulnerability exists in SoftZone Office when dealing with special doc files. An attacker can exploit the vulnerability...

Null pointer reference vulnerability in WPS Office 2016 presentation pptreader module

WPS office is an office software suite independently developed by Kingsoft Corporation. The WPS presentation wpp.exe in WPS has a null pointer reference vulnerability in the pptreader module when parsing a specific ppt file, which can be exploited by an attacker to cause a denial of service attac...

Microsoft Excel 2010 Service Pack 2 RCE Vulnerability (KB4011660)

This host is missing an important security update according to Microsoft KB4011660 SPDX-FileCopyrightText: 2018 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only ifdescriptio...

AppLocker Occasionally Blocking Layered Software

Customer reports that sometimes Office was not running, and it was being blocked by AppLocker...

Stack Overflow Vulnerability in WPS Office

WPS Office is an office software suite developed independently by Kingsoft Corporation. The EqnEdt32.exe program in the WPS Office software suffers from a stack overflow vulnerability, which can be exploited by an attacker to execute malicious code on the target system, remotely install malware,...

Microsoft office component EQNEDT32.EXE memory corruption vulnerability

Microsoft Office is a suite of office software based on the Windows operating system developed by Microsoft. A memory corruption vulnerability exists in EQNEDT32.EXE, the MS Office component of Microsoft office that is responsible for inserting and editing formulas OLE objects in documents...

Microsoft Excel 2010 Service Pack 2 Multiple Vulnerabilities (KB4011197)

This host is missing an important security update according to Microsoft KB4011197 SPDX-FileCopyrightText: 2017 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only ifdescriptio...

TippingPoint Threat Intelligence and Zero-Day Coverage – Week of October 9, 2017

Even though “Patch Tuesday” isn’t supposed to exist anymore, here I am blogging about it. As I looked at the October updates from Microsoft, the usual suspects were there. But this month was a little different. We usually see critical vulnerabilities on the browser side, but Microsoft Office is i...

Microsoft Office Remote Code Execution Vulnerability

A remote code execution vulnerability exists in Microsoft Office software when it fails to properly handle objects in memory. An attacker who successfully exploited the vulnerability could use a specially crafted file to perform actions in the security context of the current user. For example, th...

Redfan iOffice Office Software ioCtlSet.asmx suffers from SQL injection vulnerability

Redfan iOffice.net is a professional mobile OA office automation solution provider, providing mobile OA office automation system for medical, government, enterprise and military units. Red Sail iOffice.net OA Office software ioCtlSet.asmx there is a SQL injection vulnerability, the attacker can u...

Heap overflow vulnerability exists in WPS (CNVD-2017-19997)

WPS is an office software developed by Kingsoft Office Software. A heap overflow vulnerability exists in WPS. The vulnerability stems from the program's failure to validate the buffer length, which can be exploited by an attacker to cause heap corruption or execute arbitrary code by constructing ...

Microsoft Office 2007 Service Pack 3 Remote Code Execution Vulnerability (KB2880514)

This host is missing an important security update according to Microsoft KB2880514 SPDX-FileCopyrightText: 2017 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only ifdescriptio...

WPS has an out-of-bounds access vulnerability

WPS is a free office software. A memory out-of-bounds access exists in the WPS docreader module. The vulnerability stems from a miscalculation of the buffer address length. An attacker can exploit this vulnerability to obtain sensitive information...

Microsoft SharePoint Enterprise Server WAS Multiple Vulnerabilities (KB3203384)

This host is missing an important security update according to Microsoft KB3203384 SPDX-FileCopyrightText: 2017 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only CPE =...

Security Update for Microsoft Office Web Apps Server / Office Online Server (June 2017)

The Microsoft Office Online Server or Office Web Apps Server installed on the remote Windows host is missing a security update. It is, therefore, affected by multiple remote code execution vulnerabilities in Microsoft Office software due to improper handling of objects in memory. An...

Microsoft SharePoint Server 2010 WAS Multiple Vulnerabilities (KB3203458)

This host is missing an important security update according to Microsoft KB3203458 SPDX-FileCopyrightText: 2017 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only CPE =...

Microsoft SharePoint Enterprise Server 2016 Multiple Vulnerabilities (KB3203432)

This host is missing an important security update according to Microsoft KB3203432 SPDX-FileCopyrightText: 2017 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only CPE =...

Microsoft Office Word Remote Code Execution Vulnerabilities (KB3191865)

This host is missing an important security update according to Microsoft KB3191865 SPDX-FileCopyrightText: 2017 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only ifdescriptio...

Microsoft Office DLL Loading Remote Code Execution Vulnerability

Microsoft Office is an office software suite of products developed by the U.S. company Microsoft Microsoft. Commonly used components are Word, Excel, Access, Powerpoint, FrontPage and so on. A DLL loading remote code execution vulnerability exists in Microsoft Office OneNote 2007 version. An...

Microsoft Office Memory Corruption (MS17-002: CVE-2017-0003)

An Out-of-Bounds-Write vulnerability exists in Microsoft Word. The vulnerability is due to a failure of Office software to properly handle objects in memory. Successful exploitation of this issue could grant an attacker remote code execution...