CVE-2024-38171

Microsoft PowerPoint Remote Code Execution Vulnerability...

CVE-2024-38171 Microsoft PowerPoint Remote Code Execution Vulnerability

...

CVE-2024-38171

CVE-2024-38171 is Microsoft PowerPoint Remote Code Execution vulnerability. The CVE entry indicates a PowerPoint RCE with a CVSSv3.1 base score of 7.8 (HIGH) and local attack vector requiring user interaction. Connected sources corroborate Windows/Office updates addressing CVE-2024-38171: a Augus...

CVE-2024-38171 Microsoft PowerPoint Remote Code Execution Vulnerability

...

Microsoft PowerPoint Remote Code Execution Vulnerability

...

Description of the security update for PowerPoint 2016: August 13, 2024 (KB5002586)

Description of the security update for PowerPoint 2016: August 13, 2024 KB5002586 Summary This security update resolves a Microsoft PowerPoint remote code execution vulnerability. To learn more about the vulnerability, see Microsoft Common Vulnerabilities and Exposures CVE-2024-38171. Note: To...

KLA71479 Multiple vulnerabilities in Microsoft Office

Multiple vulnerabilities were found in Microsoft Office. Malicious users can exploit these vulnerabilities to execute arbitrary code, spoof user interface, gain privileges. Below is a complete list of vulnerabilities: 1. A remote code execution vulnerability in Microsoft PowerPoint can be exploit...

Microsoft Office PowerPoint 资源管理错误漏洞

Microsoft Office PowerPoint is an American Microsoft Microsoft company's software for creating, presentations PPT. A resource management error vulnerability exists in Microsoft Office PowerPoint. An attacker could exploit this vulnerability to execute arbitrary code on the system...

Microsoft Office PowerPoint PPTX File Parsing Use-After-Free Remote Code Execution Vulnerability

This vulnerability allows remote attackers to execute arbitrary code on affected installations of Microsoft Office PowerPoint. User interaction is required to exploit this vulnerability in that the target must visit a malicious page or open a malicious file. The specific flaw exists within the...

PT-2024-6658 · Microsoft · Office Powerpoint

Name of the Vulnerable Software and Affected Versions: Microsoft PowerPoint affected versions not specified Description: The issue is related to a use-after-free vulnerability in Microsoft PowerPoint, specifically in the parsing of PPTX files. This vulnerability can be exploited to allow an...

Microsoft Office PowerPoint GLB File Parsing Memory Corruption Remote Code Execution Vulnerability

This vulnerability allows remote attackers to execute arbitrary code on affected installations of Microsoft Office PowerPoint. User interaction is required to exploit this vulnerability in that the target must visit a malicious page or open a malicious file. The specific flaw exists within the...

PT-2024-6143 · Microsoft · Office Powerpoint

Name of the Vulnerable Software and Affected Versions: Microsoft PowerPoint version 16.83 Description: A library injection issue exists, allowing a specially crafted library to leverage PowerPoint's access privileges and bypass permissions. This can be triggered by a malicious application injecti...

PT-2024-12555 · Document Foundation · Libreoffice

Name of the Vulnerable Software and Affected Versions: The Document Foundation Libreoffice version 7.4.7 Description: An issue in The Document Foundation Libreoffice allows a remote attacker to cause a denial of service via a crafted .ppt file. Recommendations: For version 7.4.7, consider avoidin...

Ukraine Targeted in Cyberattack Exploiting 7-Year-Old Microsoft Office Flaw

Cybersecurity researchers have discovered a targeted operation against Ukraine that has been found leveraging a nearly seven-year-old flaw in Microsoft Office to deliver Cobalt Strike on compromised systems. The attack chain, which took place at the end of 2023 according to Deep Instinct, employs...

April 2, 2024, update for PowerPoint 2016 (KB5002568)

April 2, 2024, update for PowerPoint 2016 KB5002568 This article describes update 5002568 for Microsoft PowerPoint 2016 that was released on April 2, 2024.Be aware that the update in the Microsoft Download Center applies to the Microsoft Installer .msi-based edition of Office 2016. It doesn't app...

[SECURITY] Fedora 39 Update: pandoc-3.1.3-29.fc39

Pandoc is a Haskell library for converting from one markup format to another. The formats it can handle include - light markup formats many variants of Markdown, reStructuredText, AsciiDoc, Org-mode, Muse, Textile, txt2tags - HTML formats HTML 4 and 5 - Ebook formats EPUB v2 and v3, FB2 -...

Microsoft PowerPoint 2016 Remote Code Execution Vulnerability (KB5002495)

This host is missing an important security update according to Microsoft KB5002495 SPDX-FileCopyrightText: 2024 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only ifdescriptio...

Description of the security update for PowerPoint 2016: February 13, 2024 (KB5002495)

Description of the security update for PowerPoint 2016: February 13, 2024 KB5002495 Summary This security update resolves a Microsoft Office remote code execution vulnerability. To learn more about the vulnerability, see Microsoft Common Vulnerabilities and Exposures CVE-2024-20673. Note: To appl...

KLA63961 Multiple vulnerabilities in Microsoft Office

Multiple vulnerabilities were found in Microsoft Office. Malicious users can exploit these vulnerabilities to obtain sensitive information, execute arbitrary code, gain privileges. Below is a complete list of vulnerabilities: 1. An information disclosure vulnerability in Skype for Business can be...

Security Updates for Microsoft PowerPoint Products (February 2024)

The Microsoft PowerPoint Products are missing a security update. They are, therefore, affected by a remote code execution vulnerability. An attacker can exploit this to bypass authentication and execute unauthorized arbitrary commands. Note that Nessus has not tested for this issue but has instea...