Description of the security update for Office 2016: April 11, 2017 (KB3178702)

None None...

CVE-2017-2791

JustSystems Ichitaro 2016 Trial contains a vulnerability that exists when trying to open a specially crafted PowerPoint file. Due to the application incorrectly handling the error case for a function's result, the application will use this result in a pointer calculation for reading file data int...

Design/Logic Flaw

JustSystems Ichitaro 2016 Trial contains a vulnerability that exists when trying to open a specially crafted PowerPoint file. Due to the application incorrectly handling the error case for a function's result, the application will use this result in a pointer calculation for reading file data int...

CVE-2017-2791

JustSystems Ichitaro 2016 Trial contains a vulnerability that exists when trying to open a specially crafted PowerPoint file. Due to the application incorrectly handling the error case for a function's result, the application will use this result in a pointer calculation for reading file data int...

CVE-2017-2791

JustSystems Ichitaro 2016 Trial contains a vulnerability that exists when trying to open a specially crafted PowerPoint file. Due to the application incorrectly handling the error case for a function's result, the application will use this result in a pointer calculation for reading file data int...

CVE-2017-2791

Summary of findings (CVE-2017-2791) : JustSystems Ichitaro 2016 Trial is vulnerable during handling of PowerPoint content. The attacker can craft a chain of records via the Current User and UserEditAtom paths (PowerPoint Document stream) to induce memory corruption. The root cause is lack of vali...

Ichitaro Word Processor PersistDirectory Code Execution Vulnerability

Summary Ichitaro Office contains a vulnerability that exists when trying to open a specially crafted PowerPoint file. Due to the application incorrectly handling the error case for a function’s result, the application will use this result in a pointer calculation for reading file data into. Due t...

Microsoft Office PowerPoint 2010 - GDI 'GDI32!ConvertDxArray' Insufficient Bounds Check

Source: https://bugs.chromium.org/p/project-zero/issues/detail?id=951 Platform: GDI on Windows 7 x86 reachable from Microsoft Office 2010 Class: Out of bounds memory access The following crash was observed in Microsoft Office 2010 running under Windows 7 x86 with Application Verifier enabled...

Microsoft Office PowerPoint 2010 - MSO/OART Heap Out-of-Bounds Access

Source: https://bugs.chromium.org/p/project-zero/issues/detail?id=950 Platform: Microsoft Office 2010 on Windows 7 x86 Class: Time of check time of use leading to memory corruption The following crash was observed in Microsoft Office 2010 running under Windows 7 x86 with Application Verifier...

Microsoft Office PowerPoint 2010 - GDI GDI32!ConvertDxArray Insufficient Bounds Check

Microsoft Office PowerPoint 2010 - GDI GDI32!ConvertDxArray Insufficient Bounds Check Source: https://bugs.chromium.org/p/project-zero/issues/detail?id=951 Platform: GDI on Windows 7 x86 reachable from Microsoft Office 2010 Class: Out of bounds memory access The following crash was observed in...

MS11-022: Description of the security update for PowerPoint 2010: April 12, 2011

MS11-022: Description of the security update for PowerPoint 2010: April 12, 2011 INTRODUCTION Microsoft has released security bulletin MS11-022. To view the complete security bulletin, visit one of the following Microsoft websites: Home...

MS11-094: Description of the security update for PowerPoint 2010: December 13, 2011

MS11-094: Description of the security update for PowerPoint 2010: December 13, 2011 Introduction Microsoft has released security bulletin MS11-094. To view the complete security bulletin, visit one of the following Microsoft websites: Home users:...

The vulnerability of the Microsoft Office Web Apps software, the Microsoft PowerPoint presentation preparation program, and the Microsoft PowerPoint Viewer – tools that allow a hacker to execute arbitrary code.

The vulnerabilities of the Microsoft Office Web Apps, the Microsoft PowerPoint presentation software, and the Microsoft PowerPoint Viewer are due to an operation that occurs outside of the buffer in memory. Exploiting these vulnerabilities allows a malicious actor to execute arbitrary code using ...

CVE-2016-7230

Microsoft PowerPoint 2010 SP2, PowerPoint Viewer, and Office Web Apps 2010 SP2 allow remote attackers to execute arbitrary code via a crafted Office document, aka "Microsoft Office Memory Corruption Vulnerability."...

CVE-2016-7230

Microsoft PowerPoint 2010 SP2, PowerPoint Viewer, and Office Web Apps 2010 SP2 allow remote attackers to execute arbitrary code via a crafted Office document, aka "Microsoft Office Memory Corruption Vulnerability."...

Memory corruption

Microsoft PowerPoint 2010 SP2, PowerPoint Viewer, and Office Web Apps 2010 SP2 allow remote attackers to execute arbitrary code via a crafted Office document, aka "Microsoft Office Memory Corruption Vulnerability."...

CVE-2016-7230

CVE-2016-7230 affects Microsoft PowerPoint 2010 SP2, PowerPoint Viewer, and Office Web Apps 2010 SP2. The root cause is memory corruption from improper handling of objects in memory, enabling remote code execution when a user opens a specially crafted Office document. Exploitation requires user a...

CVE-2016-7230

Microsoft PowerPoint 2010 SP2, PowerPoint Viewer, and Office Web Apps 2010 SP2 allow remote attackers to execute arbitrary code via a crafted Office document, aka "Microsoft Office Memory Corruption Vulnerability."...

Microsoft Office PowerPoint Remote Code Execution Vulnerability (3199168)

This host is missing an important security update according to Microsoft Bulletin MS16-133. SPDX-FileCopyrightText: 2016 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only...

Microsoft Office PowerPoint Viewer Remote Code Execution Vulnerability (3199168)

This host is missing an important security update according to Microsoft Bulletin MS16-133. SPDX-FileCopyrightText: 2016 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only...