92 matches found
Microsoft Office OLE2Link vulnerability (CVE-2017-0199)
Vulnerability details references: Office OLE2Link zero-day from NCCGroup） CVE-2017-0199: In the Wild Attacks Leveraging the HTA Handler From FireEye） HTAsThe Microsoft OLE2Link object contains a vulnerability in the way that it processes remotely-linked content. The remote content is opened based...
Beware of an Unpatched Microsoft Word 0-Day Flaw being Exploited in the Wild
It's 2017, and opening a simple MS Word file could compromise your system. Security researchers are warning of a new in-the-wild attack that silently installs malware on fully-patched computers by exploiting a serious — and yet unpatched — zero-day vulnerability in all current versions of Microso...
Twin zero-day attacks: PROMETHIUM and NEODYMIUM target individuals in Europe
Targeted attacks are typically carried out against individuals to obtain intellectual property and other valuable data from target organizations. These individuals are either directly in possession of the targeted information or are able to connect to networks where the information resides...
MS16-088: Description of the security update for Excel 2010: July 12, 2016
MS16-088: Description of the security update for Excel 2010: July 12, 2016 Summary This security update resolves vulnerabilities in Microsoft Office that could allow remote code execution if a user opens a specially crafted Office file. To learn more about these vulnerabilities, see Microsoft...
March 8, 2016, update for Office 2016 (KB3114857)
None None...
March 8, 2016, update for Office 2016 (KB3114705)
None None...
Adobe Recommends Protected View as Temporary Zero Day Mitigation
Adobe released an advisory yesterday suggesting a manual mitigation for zero-day vulnerabilities in its Reader and Acrobat products that are being actively exploited in the wild. The exploit is the first sandbox escape in Adobe Reader X and above. FireEye, which reported the vulnerability to Adob...
Adobe Reader and Acrobat memory corruption vulnerabilities
Overview Adobe Reader and Acrobat 11.0.01 and earlier, 10.1.5 and earlier, and 9.5.3 and earlier contain memory corruption vulnerabilities. Description The Adobe security bulletin APSB13-07 states:Adobe has released security updates for Adobe Reader and Acrobat XI 11.0.01 and earlier for Windows...
Adobe Extends Security of Reader and Acrobat With Better Sandbox, Force ASLR
Adobe has upgraded the security capabilities of both Reader and Acrobat with new releases this week, extending the functionality of the sandbox and adding a feature that forces all of the DLLs loaded by the applications to use ASLR, regardless of whether they originally were compiled with ASLR...
Microsoft Struts Office 2010 'Sandbox' Security
From Computerworld Gregg Keizer Microsoft’s plan to “sandbox” documents in the next version of Office looks like a “very good step forward,” according to one security analyst. Last week, Microsoft revealed more details about a new security feature in Office 2010, dubbed “Protected View,” that is...