PT-2016-2485

Name of the Vulnerable Software and Affected Versions Microsoft Office 2010 SP2 Excel 2010 SP2 PowerPoint 2010 SP2 Word 2010 SP2 Excel 2013 SP1 PowerPoint 2013 SP1 Word 2013 SP1 Excel 2013 RT SP1 PowerPoint 2013 RT SP1 Word 2013 RT SP1 Excel 2016 Word 2016 Word Automation Services on SharePoint...

Symantec Web Gateway Anti-Virus Definition < 20160628.037 Multiple Vulnerabilities (SYM16-010) (credentialed check)

According to its self-reported anti-virus definition version number, the remote web server is hosting a version of Symantec Web Gateway with an anti-virus definition version prior to 20160628.037. It is, therefore, affected by multiple vulnerabilities : - An array indexing error exists in the UnR...

Microsoft Office CVE-2016-3279 Remote Code Execution Vulnerability

Description Microsoft Office is prone to a remote code-execution vulnerability. An attacker can leverage this issue to execute arbitrary code in the context of the currently logged-in user. Failed exploit attempts will likely result in denial-of-service conditions. Technologies Affected Microsoft...

Symantec Mail Security for Exchange / Domino Decomposer Engine Multiple Vulnerabilities (SYM16-010)

The version of Symantec Mail Security for Exchange or Domino installed on the remote Windows host is affected by multiple vulnerabilities in the decomposer engine : - An array indexing error exists in the UnRAR component in the Unpack::ShortLZ function in unpack15.cpp that is triggered when...

Symantec Messaging Gateway 10.x < 10.6.1-4 Multiple Vulnerabilities (SYM16-010)

According to its self-reported version number, the Symantec Messaging Gateway SMG running on the remote host is 10.x prior to 10.6.1-4. It is, therefore, affected by multiple vulnerabilities : - An array indexing error exists in the UnRAR component in the Unpack::ShortLZ function in unpack15.cpp...

Symantec AntiVirus - PowerPoint Misaligned Stream-cache Remote Stack Buffer Overflow (PoC)

Symantec AntiVirus - PowerPoint Misaligned Stream-cache Remote Stack Buffer Overflow PoC Source: https://bugs.chromium.org/p/project-zero/issues/detail?id=823 A PowerPoint PPT file is a complicated OLE compound document comprising of a series of streams. The format is described by Microsoft in...

Symantec AntiVirus - PowerPoint Misaligned Stream-cache Remote Stack Buffer Overflow

Exploit for multiple platform in category dos / poc Source: https://bugs.chromium.org/p/project-zero/issues/detail?id=823 A PowerPoint PPT file is a complicated OLE compound document comprising of a series of streams. The format is described by Microsoft in MS-PPT...

Symantec AntiVirus - PowerPoint Misaligned Stream-cache Remote Stack Buffer Overflow (PoC)

Source: https://bugs.chromium.org/p/project-zero/issues/detail?id=823 A PowerPoint PPT file is a complicated OLE compound document comprising of a series of streams. The format is described by Microsoft in MS-PPT. https://msdn.microsoft.com/en-us/library/office/cc313106v=office.12.aspx Symantec...

Microsoft Office Memory Corruption Vulnerability (CNVD-2016-04049)

Microsoft Office is an office software suite of products developed by the U.S. company Microsoft Microsoft. Commonly used components are Word, Excel, Access, Powerpoint, FrontPage and so on. A memory corruption vulnerability exists in Microsoft Office, which arises from the program's failure to...

apache-poi: denial of service in HSLFSlideShow via corrupted PPT file

A denial of service flaw was found in the way the HSLFSlideShow class implementation in Apache POI handled certain PPT files. A remote attacker could submit a specially crafted PPT file that would cause Apache POI to hang indefinitely...

MS16-054: Security Update for Microsoft Office (3155544) (Mac OS X)

The version of Microsoft Office installed on the remote Mac OS X host is affected by a remote code execution vulnerability due to improper handling of objects in memory. An unauthenticated, remote attacker can exploit this by convincing a user to open a specially crafted file in Microsoft Office,...

MS16-042: Description of the security update for Office 2016 for Mac: April 12, 2016

MS16-042: Description of the security update for Office 2016 for Mac: April 12, 2016 Summary This security update resolves vulnerabilities in Microsoft Office that could allow remote code execution if a user opens a specially crafted Office file. To learn more about these vulnerabilities, see...

Microsoft PowerPoint - Base64 encoded String, WebView code execution vulnerabilities

HackApp vulnerability scanner discovered that application Microsoft PowerPoint published at the 'play' market has multiple vulnerabilities...

Microsoft PowerPoint Viewer 12.0.6600.1000 DLL Hijacking

Credits: hyp3rlinx + Website: hyp3rlinx.altervista.org + Source: http://hyp3rlinx.altervista.org/advisories/MICROSOFT-PPT-VIEWER-CODE-EXEC.txt Vendor: =================== www.microsoft.com Product: ============================ Microsoft PowerPoint Viewer version: 12.0.6600.1000 Vulnerability...

Microsoft Producer for Microsoft Office PowerPoint vulnerable to cross-site scripting

Overview Microsoft Producer for Microsoft Office PowerPoint may create a web page which contains a DOM-based cross-site scripting vulnerability CWE-79. Impact An arbitrary script may be executed on the user's web browser. Solution Do not use Microsoft Producer for Microsoft Office PowerPoint...

JVN#77012922: Microsoft Producer for Microsoft Office PowerPoint vulnerable to cross-site scripting

Microsoft Producer for Microsoft Office PowerPoint may create a web page which contains a DOM-based cross-site scripting vulnerability CWE-79. Impact An arbitrary script may be executed on the user's web browser. Solution Do not use Microsoft Producer for Microsoft Office PowerPoint Microsoft...

Microsoft Office Memory Corruption (MS16-015: CVE-2016-0055)

A remote code execution vulnerability has been identified in Microsoft PowerPoint. The vulnerability is due to improper dereferencing of pointers when handling certain objects. A remote attacker could trigger this flaw by convincing a victim to open a malicious PowerPoint file that will lead to a...

BlackEnergy APT Group Spreading Malware via Tainted Word Docs

Attackers have begun using rigged Microsoft Word documents propagated via spearphishing emails to spread the BlackEnergy Trojan. Researchers with Kaspersky Lab’s Global Research and Analysis Team discovered a malicious Word document last week that appears to stem from a campaign against one of th...

VulnCheck KEV: CVE-2010-2572

Microsoft PowerPoint contains a buffer overflow vulnerability that alllows for remote code execution...

Microsoft Office Bypass ASLR

The vulnerabilities of Microsoft Visio, a graphic editor; Microsoft Excel, an electronic spreadsheet editor; Microsoft PowerPoint, a presentation software; Microsoft Word, a text editor; the Microsoft Visual Basic development environment; and the Microsoft Office suite are related to the lack of...