MS12-038: Description of the security update for the .NET Framework 2.0 Service Pack 2 on Windows Vista Service Pack 2 and Windows Server 2008 Service Pack 2: June 12, 2012

MS12-038: Description of the security update for the .NET Framework 2.0 Service Pack 2 on Windows Vista Service Pack 2 and Windows Server 2008 Service Pack 2: June 12, 2012 Microsoft has released the security bulletin MS12-038. You can view the complete security bulletin by visiting one of the...

MS11-088: Description of the security update for Microsoft Pinyin IME 2010 for Microsoft Office 2010 and Microsoft Office 2010 Service Pack 1: December 13, 2011

MS11-088: Description of the security update for Microsoft Pinyin IME 2010 for Microsoft Office 2010 and Microsoft Office 2010 Service Pack 1: December 13, 2011 Introduction Microsoft has released security bulletin MS11-088. To view the complete security bulletin, visit one of the following...

MS11-089: Description of the security update for Microsoft Office 2010 and Microsoft Office 2010 Service Pack 1: December 13, 2011

MS11-089: Description of the security update for Microsoft Office 2010 and Microsoft Office 2010 Service Pack 1: December 13, 2011 Microsoft has released security bulletin MS11-089. To view the complete security bulletin, visit one of the following Microsoft websites: Home...

Update Rollup 10 for System Center 2012 R2 Virtual Machine Manager

Update Rollup 10 for System Center 2012 R2 Virtual Machine Manager Introduction This article describes the new features that are added and the issues that are fixed in Update Rollup 10 for Microsoft System Center 2012 R2 Virtual Machine Manager. The following updates are available for System Cent...

Update Rollup 11 for System Center 2012 Virtual Machine Manager Service Pack 1

Update Rollup 11 for System Center 2012 Virtual Machine Manager Service Pack 1 Introduction This article describes the issues that are fixed in Update Rollup 11 for Microsoft System Center 2012 Virtual Machine Manager Service Pack 1 SP1. There is one update available for System Center 2012 SP1...

Update Rollup 7 for System Center 2012 Orchestrator Service Pack 1

Update Rollup 7 for System Center 2012 Orchestrator Service Pack 1 Introduction This article describes the issues that are fixed in Update Rollup 7 for Microsoft System Center 2012 Orchestrator Service Pack 1 SP1. This article also contains the installation instructions for Update Rollup 7 for...

Windows Server 2008 R2 domain controller crashes when two threads use the same LDAP connection

Windows Server 2008 R2 domain controller crashes when two threads use the same LDAP connection Summary This update fixes an access violation on the LSASS.exe process. This issue occurs because the Lightweight Directory Access Protocol LDAP connection is disconnected and reset from another thread...

MS14-009: Description of the security update for the .NET Framework 3.5.1 for Windows 7 Service Pack 1 and Windows Server 2008 R2 Service Pack 1: February 11, 2014

MS14-009: Description of the security update for the .NET Framework 3.5.1 for Windows 7 Service Pack 1 and Windows Server 2008 R2 Service Pack 1: February 11, 2014 View products that this article applies to. Introduction This update resolves vulnerabilities that could allow elevation of privilege...

MS14-044: Description of the security update for SQL Server 2008 R2 Service Pack 2 (QFE): August 12, 2014

MS14-044: Description of the security update for SQL Server 2008 R2 Service Pack 2 QFE: August 12, 2014 Introduction A security issue has been identified in Microsoft SQL Server 2008 R2 Service Pack 2 that could allow an attacker to compromise your system and gain control over it. You can help...

SoftMaker Office 201x Privilege Escalation Vulnerability

SoftMaker Office 201x suffers from a local privilege escalation vulnerability due to an unprotected directory. Hi @ll, the service pack installers for SoftMaker Office 201x, available from , are surprise.- vulnerable. The executable installer OUCH ofw16763.exe, a 7z SFX OUCH, creates an UNPROTECT...

The vulnerability of Microsoft Excel spreadsheet editors and the Microsoft Office Compatibility Pack allows a perpetrator to execute arbitrary code.

The vulnerability of Microsoft Excel spreadsheet editors and the Microsoft Office Compatibility Pack is due to an operation that occurs outside of the buffer in memory. Exploiting this vulnerability allows a malicious actor to execute arbitrary code using a specially crafted document...

CVE-2016-7290

Microsoft Word 2007 SP3, Office 2010 SP2, Word 2010 SP2, Office Compatibility Pack SP3, Word for Mac 2011, Word Automation Services on SharePoint Server 2010 SP2, and Office Web Apps 2010 SP2 allow remote attackers to obtain sensitive information from process memory or cause a denial of service...

Information disclosure

Microsoft Excel 2007 SP3, Office Compatibility Pack SP3, Excel Viewer, Excel for Mac 2011, and Excel 2016 for Mac allow remote attackers to obtain sensitive information from process memory or cause a denial of service out-of-bounds read via a crafted document, aka "Microsoft Office Information...

CVE-2016-7265

Microsoft Excel 2007 SP3, Excel 2010 SP2, Excel 2013 SP1, Excel 2013 RT SP1, Excel 2016, Office Compatibility Pack SP3, Excel Viewer, Excel Services on SharePoint Server 2007 SP3, and Excel Services on SharePoint Server 2010 SP2 allow remote attackers to obtain sensitive information from process...

CVE-2016-7264

Microsoft Excel 2007 SP3, Office Compatibility Pack SP3, Excel Viewer, Excel for Mac 2011, and Excel 2016 for Mac allow remote attackers to obtain sensitive information from process memory or cause a denial of service out-of-bounds read via a crafted document, aka "Microsoft Office Information...

CVE-2016-7262

CVE-2016-7262 is a Microsoft Office vulnerability (Microsoft Excel family) described as a Security Feature Bypass: a crafted cell mishandled on click can allow user-assisted remote command execution. Affected products include Excel 2007 SP3, 2010 SP2, 2013 SP1, 2013 RT SP1, 2016, Office Compatibi...

CVE-2016-7264

CVE-2016-7264 affects Microsoft Excel 2007 SP3, Office Compatibility Pack SP3, Excel Viewer, Excel for Mac 2011, and Excel 2016 for Mac. It enables information disclosure via an out-of-bounds memory read in a crafted document; impact is memory contents exposure. No exploitation details are provid...

Exploit Development IDE: Exploit Pack

Exploit Development IDE Exploit Pack is a full IDE for exploit development and penetration testing with base workspace and an extensible module system. It is written mostly in JAVA but its modules use Python as an engine and it can be used to develop packages or tools which then can be run inside...

Microsoft Office Compatibility Pack Multiple Vulnerabilities (3204068)

This host is missing an important security update according to Microsoft Bulletin MS16-148. SPDX-FileCopyrightText: 2016 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only...

MS16-148: Description of the security update for Office 2010: December 13, 2016

MS16-148: Description of the security update for Office 2010: December 13, 2016 Summary This security update resolves vulnerabilities in Microsoft Office that could allow remote code execution if a user opens a specially crafted Office file. To learn more about these vulnerabilities, see Microsof...