Antenna House Office Server Document Converter OLEread Code Execuction Vulnerability

Summary An exploitable heap corruption exists in the PowerPoint document conversion functionality of the Antenna House Office Server Document Converter version V6.1 Pro MR2 for Linux64 6,1,2018,0312. A crafted PowerPoint PPT document can lead to heap corruption, resulting in remote code execution...

Microsoft Office Multiple Remote Code Execution Vulnerabilities (May 2018) - Mac OS X

This host is missing an important security update for Microsoft Office 2016 on Mac OS X according to Microsoft security update May 2018 SPDX-FileCopyrightText: 2018 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holder...

CVE-2018-8176

A remote code execution vulnerability exists in Microsoft PowerPoint software when the software fails to properly validate XML content, aka "Microsoft PowerPoint Remote Code Execution Vulnerability." This affects Microsoft Office...

Remote code execution

A remote code execution vulnerability exists in Microsoft PowerPoint software when the software fails to properly validate XML content, aka "Microsoft PowerPoint Remote Code Execution Vulnerability." This affects Microsoft Office...

CVE-2018-8176

A remote code execution vulnerability exists in Microsoft PowerPoint software when the software fails to properly validate XML content, aka "Microsoft PowerPoint Remote Code Execution Vulnerability." This affects Microsoft Office...

CVE-2018-8176

A remote code execution vulnerability exists in Microsoft PowerPoint software when the software fails to properly validate XML content, aka "Microsoft PowerPoint Remote Code Execution Vulnerability." This affects Microsoft Office...

CVE-2018-8176

CVE-2018-8176 is a remote code execution vulnerability in Microsoft PowerPoint (Microsoft Office) where PowerPoint fails to properly validate XML content. The underlying issue can allow an attacker to run arbitrary code in the context of the logged-in user after a crafted PowerPoint file is opene...

Security Update for Microsoft Office (May 2018) (macOS)

The Microsoft Office 2016 application installed on the remote macOS or Mac OS X host is missing a security update. It is, therefore, affected by the following vulnerabilities: - A remote code execution vulnerability exists in Microsoft Excel software when the software fails to properly handle...

Microsoft PowerPoint Remote Code Execution Vulnerability (CNVD-2018-10942)

Microsoft Office 2016 for Mac is a Mac-based office software suite product developed by Microsoft Corporation in the U.S. PowerPoint is a document presentation tool in the Office suite. A security vulnerability exists in PowerPoint in Microsoft Office 2016 for Mac-based platforms, which stems fro...

Microsoft PowerPoint Remote Code Execution Vulnerability

A remote code execution vulnerability exists in Microsoft PowerPoint software when the software fails to properly validate XML content. An attacker who successfully exploited the vulnerability could run arbitrary code in the context of the current user. If the current user is logged on with...

KLA11250 ACE vulnerability in Microsoft PowerPoint

A remote code execution vulnerability was found in Microsoft PowerPoint. Malicious users can exploit this vulnerability via specially crafted file to execute arbitrary code. Original advisories CVE-2018-8176 Related products Microsoft-Office-PowerPoint CVE list CVE-2018-8176 critical KB list...

poi: Parsing of multiple file types can cause a denial of service via infinite loop or out of memory exception

Apache POI in versions prior to release 3.17 are vulnerable to Denial of Service Attacks: 1 Infinite Loops while parsing crafted WMF, EMF, MSG and macros POI bugs 61338 and 61294, and 2 Out of Memory Exceptions while parsing crafted DOC, PPT and XLS POI bugs 52372 and 61295...

[SECURITY] Fedora 28 Update: apache-poi-3.17-1.fc28

The Apache POI Project's mission is to create and maintain Java APIs for manipulating various file formats based upon the Office Open XML standards OOXML and Microsoft's OLE 2 Compound Document format OLE2. In short, you can read and write MS Excel files using Java. In addition, you can read and...

Microsoft Office: Office Presentation Service

This test checks the setting for policy OpenVAS Vulnerability Test $Id: office2013officepresentationservice.nasl 11843 2018-10-11 14:33:21Z emoss $ Check value for Remove Office Presentation Service from the list of online presentation services in PowerPoint and Word Authors: Emanuel Moss...

Microsoft Office: Programmatic access for creating online presentations (PowerPoint, Word)

This test checks the setting for policy OpenVAS Vulnerability Test $Id: office2013programmaticcreationonlinepresentation.nasl 11843 2018-10-11 14:33:21Z emoss $ Check value for Restrict programmatic access for creating online presentations in PowerPoint and Word Authors: Emanuel Moss Copyright:...

Microsoft Office: Do not automatically hyperlink screenshots

This test checks the setting for policy OpenVAS Vulnerability Test $Id: office2013noautohyperlinkscreenshots.nasl 11843 2018-10-11 14:33:21Z emoss $ Check value for Do not automatically hyperlink screenshots Authors: Emanuel Moss Copyright: Copyright c 2018 Greenbone Networks GmbH,...

Open-Xchange: Blind XXE via Powerpoint files

Summary During the parsing of Powerpoint files it seems that it is possible to include XXE payload which will be executed on the Open-XChange server. I was able to identify which files exist on the server, and cause the server make arbitrary request to my own server, and I am pretty sure it is al...

Polaris office 2017 has an illegal memory access vulnerability

Polaris Office 2017 is an office software developed by INFRAWARE Korea, which can be used to view and edit Word documents, Excel tables, Microsoft Office PowerPoint slides, and other commonly used office documents. Polaris Office 2017 suffers from an illegal memory access vulnerability when...

March 6, 2018, update for Office 2016 (KB4011624)

None None...

Null pointer reference vulnerability in WPS Office 2016 presentation kso module (CNVD-2018-04915)

WPS office is an office software suite independently developed by Kingsoft Corporation. WPS presentation wpp.exe in WPS has a null pointer reference vulnerability in the kso module when parsing a specific ppt file, which can be exploited by an attacker to cause a denial of service attack or code...