Microsoft SharePoint Server WAS Multiple Vulnerabilities (3170008)

This host is missing a critical security update according to Microsoft Bulletin MS16-088. SPDX-FileCopyrightText: 2016 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only CPE =...

MS16-088: Description of the security update for SharePoint Server 2016: July 12, 2016

None None...

MS16-088: Description of the security update for SharePoint Server 2010 Office Web Apps: July 12, 2016

MS16-088: Description of the security update for SharePoint Server 2010 Office Web Apps: July 12, 2016 Summary This security update resolves vulnerabilities in Microsoft Office that could allow remote code execution if a user opens a specially crafted Office file. To learn more about these...

MS16-088: Description of the security update for Word Automation Services on SharePoint Server 2010: July 12, 2016

MS16-088: Description of the security update for Word Automation Services on SharePoint Server 2010: July 12, 2016 Summary This security update resolves vulnerabilities in Microsoft Office that could allow remote code execution if a user opens a specially crafted Office file. To learn more about...

MS16-088: Description of the security update for Word Automation Services on SharePoint Server 2013: July 12, 2016

MS16-088: Description of the security update for Word Automation Services on SharePoint Server 2013: July 12, 2016 Summary This security update resolves vulnerabilities in Microsoft Office that could allow remote code execution if a user opens a specially crafted Office file. To learn more about...

Microsoft Office CVE-2016-3281 Memory Corruption Vulnerability

Description Microsoft Office is prone to a remote memory-corruption vulnerability because it fails to properly handle objects in memory. An attacker can leverage this issue to execute arbitrary code in the context of the currently logged-in user. Failed exploit attempts will likely result in deni...

Microsoft Office CVE-2016-3282 Memory Corruption Vulnerability

Description Microsoft Office is prone to a remote memory-corruption vulnerability because it fails to properly handle objects in memory. An attacker can leverage this issue to execute arbitrary code in the context of the currently logged-in user. Failed exploit attempts will likely result in deni...

The vulnerability of Microsoft SharePoint software allows a remote attacker to compromise the confidentiality, integrity, and accessibility of protected information.

There is a vulnerability in SharePoint Server that allows for an increase in the level of privileges. Exploiting this vulnerability enables a malicious actor, after passing authentication, to execute any arbitrary code within the context of the authorized user’s security. This is done through a...

The vulnerability of Microsoft SharePoint software allows a remote attacker to compromise the confidentiality, integrity, and accessibility of protected information.

There is a vulnerability in SharePoint Server that allows for an increase in the level of privileges. Exploiting this vulnerability enables a malicious actor, after passing authentication, to execute any arbitrary code within the context of the authorized user’s security. This is done through a...

The vulnerability of Microsoft SharePoint software allows a remote attacker to compromise protected information.

There is a vulnerability in Microsoft SharePoint Server that allows for an increase in privileges levels. Exploiting this vulnerability enables a perpetrator to execute cross-site scripts on a vulnerable system and to run scripts within the context of authorized user security...

The vulnerability of the Microsoft SharePoint Server software allows a remote attacker to execute arbitrary code with privileges of the current user.

The vulnerability of the SharePoint Server software lies in a flaw related to the processing of specially crafted files. Exploiting this flaw allows an unauthorized intruder to execute arbitrary code with the privileges of the current user...

The vulnerability of the Microsoft SharePoint Server software allows a perpetrator to execute arbitrary code.

The vulnerability of the Microsoft SharePoint Server software relates to errors that occur during the processing of specially crafted files. Exploiting this vulnerability allows an unauthorized intruder to execute arbitrary code...

Vulnerability of the Word Viewer program for reading DOC files; Microsoft SharePoint Server corporate application suite; Microsoft Office Web Apps software suite; Microsoft Office Compatibility Pack compatibility suite; Microsoft Word text editor; Microsoft Office software suite, which allows a perpetrator to obtain confidential information from process memory.

The vulnerability in the Word Viewer, a component of the Microsoft SharePoint Server corporate application suite, as well as the Microsoft Office Web Apps and Microsoft Office Compatibility Pack, affects text editors like Microsoft Word. These vulnerabilities stem from a lack of protection for...

CVE-2016-3234

Microsoft Word 2007 SP3, Office 2010 SP2, Word 2010 SP2, Office Compatibility Pack SP3, Word Viewer, Word Automation Services on SharePoint Server 2010 SP2, Word Automation Services on SharePoint Server 2013 SP1, Office Web Apps 2010 SP2, and Office Web Apps Server 2013 SP1 allow remote attackers...

CVE-2016-0025

Microsoft Word 2007 SP3, Office 2010 SP2, Word 2010 SP2, Word 2013 SP1, Word 2013 RT SP1, Office 2016, Word 2016, Word for Mac 2011, Word 2016 for Mac, Office Compatibility Pack SP3, Word Automation Services on SharePoint Server 2010 SP2, Word Automation Services on SharePoint Server 2013 SP1,...

Memory corruption

Microsoft Word 2007 SP3, Office 2010 SP2, Word 2010 SP2, Word 2013 SP1, Word 2013 RT SP1, Office 2016, Word 2016, Word for Mac 2011, Word 2016 for Mac, Office Compatibility Pack SP3, Word Automation Services on SharePoint Server 2010 SP2, Word Automation Services on SharePoint Server 2013 SP1,...

Information disclosure

Microsoft Word 2007 SP3, Office 2010 SP2, Word 2010 SP2, Office Compatibility Pack SP3, Word Viewer, Word Automation Services on SharePoint Server 2010 SP2, Word Automation Services on SharePoint Server 2013 SP1, Office Web Apps 2010 SP2, and Office Web Apps Server 2013 SP1 allow remote attackers...

CVE-2016-3234

CVE-2016-3234 affects Microsoft Word 2007 SP3, Office 2010 SP2, Word 2010 SP2, Office Compatibility Pack SP3, Word Viewer, Word Automation Services on SharePoint 2010 SP2/2013 SP1, Office Web Apps 2010 SP2, and Office Web Apps Server 2013 SP1. The root cause is an information disclosure flaw that...

CVE-2016-0025

Microsoft Word 2007 SP3, Office 2010 SP2, Word 2010 SP2, Word 2013 SP1, Word 2013 RT SP1, Office 2016, Word 2016, Word for Mac 2011, Word 2016 for Mac, Office Compatibility Pack SP3, Word Automation Services on SharePoint Server 2010 SP2, Word Automation Services on SharePoint Server 2013 SP1,...

CVE-2016-3234

Microsoft Word 2007 SP3, Office 2010 SP2, Word 2010 SP2, Office Compatibility Pack SP3, Word Viewer, Word Automation Services on SharePoint Server 2010 SP2, Word Automation Services on SharePoint Server 2013 SP1, Office Web Apps 2010 SP2, and Office Web Apps Server 2013 SP1 allow remote attackers...