Microsoft Excel 2010 Service Pack 2 RCE Vulnerability (KB4011660)

This host is missing an important security update according to Microsoft KB4011660 SPDX-FileCopyrightText: 2018 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only ifdescriptio...

AppLocker Occasionally Blocking Layered Software

Customer reports that sometimes Office was not running, and it was being blocked by AppLocker...

Stack Overflow Vulnerability in WPS Office

WPS Office is an office software suite developed independently by Kingsoft Corporation. The EqnEdt32.exe program in the WPS Office software suffers from a stack overflow vulnerability, which can be exploited by an attacker to execute malicious code on the target system, remotely install malware,...

Microsoft office component EQNEDT32.EXE memory corruption vulnerability

Microsoft Office is a suite of office software based on the Windows operating system developed by Microsoft. A memory corruption vulnerability exists in EQNEDT32.EXE, the MS Office component of Microsoft office that is responsible for inserting and editing formulas OLE objects in documents...

Microsoft Excel 2010 Service Pack 2 Multiple Vulnerabilities (KB4011197)

This host is missing an important security update according to Microsoft KB4011197 SPDX-FileCopyrightText: 2017 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only ifdescriptio...

TippingPoint Threat Intelligence and Zero-Day Coverage – Week of October 9, 2017

Even though “Patch Tuesday” isn’t supposed to exist anymore, here I am blogging about it. As I looked at the October updates from Microsoft, the usual suspects were there. But this month was a little different. We usually see critical vulnerabilities on the browser side, but Microsoft Office is i...

Microsoft Office Remote Code Execution Vulnerability

A remote code execution vulnerability exists in Microsoft Office software when it fails to properly handle objects in memory. An attacker who successfully exploited the vulnerability could use a specially crafted file to perform actions in the security context of the current user. For example, th...

Redfan iOffice Office Software ioCtlSet.asmx suffers from SQL injection vulnerability

Redfan iOffice.net is a professional mobile OA office automation solution provider, providing mobile OA office automation system for medical, government, enterprise and military units. Red Sail iOffice.net OA Office software ioCtlSet.asmx there is a SQL injection vulnerability, the attacker can u...

Heap overflow vulnerability exists in WPS (CNVD-2017-19997)

WPS is an office software developed by Kingsoft Office Software. A heap overflow vulnerability exists in WPS. The vulnerability stems from the program's failure to validate the buffer length, which can be exploited by an attacker to cause heap corruption or execute arbitrary code by constructing ...

Microsoft Office 2007 Service Pack 3 Remote Code Execution Vulnerability (KB2880514)

This host is missing an important security update according to Microsoft KB2880514 SPDX-FileCopyrightText: 2017 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only ifdescriptio...

WPS has an out-of-bounds access vulnerability

WPS is a free office software. A memory out-of-bounds access exists in the WPS docreader module. The vulnerability stems from a miscalculation of the buffer address length. An attacker can exploit this vulnerability to obtain sensitive information...

Microsoft SharePoint Enterprise Server WAS Multiple Vulnerabilities (KB3203384)

This host is missing an important security update according to Microsoft KB3203384 SPDX-FileCopyrightText: 2017 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only CPE =...

Security Update for Microsoft Office Web Apps Server / Office Online Server (June 2017)

The Microsoft Office Online Server or Office Web Apps Server installed on the remote Windows host is missing a security update. It is, therefore, affected by multiple remote code execution vulnerabilities in Microsoft Office software due to improper handling of objects in memory. An...

Microsoft SharePoint Enterprise Server 2016 Multiple Vulnerabilities (KB3203432)

This host is missing an important security update according to Microsoft KB3203432 SPDX-FileCopyrightText: 2017 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only CPE =...

Microsoft SharePoint Server 2010 WAS Multiple Vulnerabilities (KB3203458)

This host is missing an important security update according to Microsoft KB3203458 SPDX-FileCopyrightText: 2017 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only CPE =...

Microsoft Office Word Remote Code Execution Vulnerabilities (KB3191865)

This host is missing an important security update according to Microsoft KB3191865 SPDX-FileCopyrightText: 2017 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only ifdescriptio...

Microsoft Office DLL Loading Remote Code Execution Vulnerability

Microsoft Office is an office software suite of products developed by the U.S. company Microsoft Microsoft. Commonly used components are Word, Excel, Access, Powerpoint, FrontPage and so on. A DLL loading remote code execution vulnerability exists in Microsoft Office OneNote 2007 version. An...

Microsoft Office Memory Corruption (MS17-002: CVE-2017-0003)

An Out-of-Bounds-Write vulnerability exists in Microsoft Word. The vulnerability is due to a failure of Office software to properly handle objects in memory. Successful exploitation of this issue could grant an attacker remote code execution...

CVE-2016-7262

Microsoft Excel 2007 SP3, Excel 2010 SP2, Excel 2013 SP1, Excel 2013 RT SP1, Excel 2016, Office Compatibility Pack SP3, and Excel Viewer allow user-assisted remote attackers to execute arbitrary commands via a crafted cell that is mishandled upon a click, aka “Microsoft Office Security Feature...

Microsoft SharePoint Server Excel Services Remote Code Execution Vulnerability (3199168)

This host is missing an important security update according to Microsoft Bulletin MS16-133. SPDX-FileCopyrightText: 2016 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only CPE...