8860 matches found
The May 2014 Security Updates
Today, we released eight security bulletins – two rated Critical and six rated Important – to address 13 Common Vulnerability & Exposures CVEs in .NET Framework, Office, SharePoint, Internet Explorer, and Windows. We encourage you to apply all of these updates, but for those who need to prioritiz...
MS14-022: Description of the security update for SharePoint Server 2013: May 13, 2014
Resolves vulnerabilities in Microsoft Office server and productivity software that could allow remote code execution if an authenticated attacker sends specially crafted page content to a target SharePoint server.IntroductionThis update resolves vulnerabilities in Microsoft SharePoint Designer 20...
Microsoft SharePoint CVE-2014-1754 Cross Site Scripting Vulnerability
Description Microsoft SharePoint is prone to a cross-site scripting vulnerability because it fails to properly sanitize user-supplied input. An attacker may leverage this issue to execute arbitrary script code in the browser of an unsuspecting user in the context of the affected site. This may...
MS14-022: Description of the security update for Microsoft SharePoint Designer 2013 (32-bit versions) (spd): May 13, 2014
None None...
MS14-022: Description of the security update for Web Applications 2010: May 13, 2014
Resolves vulnerabilities in Web Applications 2010 that could allow remote code execution if an authenticated attacker sends specially crafted page content to a target SharePoint server.IntroductionThis update resolves vulnerabilities in Web Applications 2010 that could allow remote code execution...
Microsoft SharePoint CVE-2014-0251 Multiple Remote Code Execution Vulnerabilities
Description Microsoft SharePoint is prone to multiple remote code-execution vulnerabilities. An attacker can leverage these issues to execute arbitrary code in the context of the W3WP service account user. Technologies Affected Microsoft Office Web Apps 2010 SP1 Microsoft Office Web Apps 2010 SP2...
MS14-022: Description of the security update for SharePoint Designer 2013: May 13, 2014
None None...
MS14-022: Description of the security update for SharePoint Designer 2010: May 13, 2014
None None...
MS14-022: Description of the security update for Office Web Apps Server 2013: May 13, 2014
Resolves vulnerabilities in Office Web Apps Server 2013 that could allow remote code execution if an authenticated attacker sends specially crafted page content to a target SharePoint Server.IntroductionThis update resolves vulnerabilities in Microsoft Office Web Apps Server 2013 that could allow...
MS14-022: Description of the security update for Windows SharePoint Services 3.0: May 13, 2014
None None...
MS14-022: Description of the security update for SharePoint Designer 2013 (spdcore): May 13, 2014
None None...
MS14-022: Vulnerabilities in Microsoft SharePoint Server could allow remote code execution: May 13, 2014
This security update resolves multiple privately reported vulnerabilities in Microsoft Office server and productivity software. The most severe of these vulnerabilities could allow remote code execution if an authenticated attacker sends specially crafted page content to a target SharePoint...
Microsoft SharePoint Cross-site Scripting (MS14-022; CVE-2014-1754)
An elevation of privilege vulnerability exists in Microsoft SharePoint Server. The vulnerability is caused when SharePoint Server does not properly sanitize a specially crafted request. An authenticated attacker could exploit this vulnerability by sending a specially crafted request to an affecte...
May 2014 Microsoft Patch Tuesday Security Updates
One week after releasing an out-of-band patch for an Internet Explorer zero day, Microsoft has provided a head’s up that next week’s Patch Tuesday security updates will include another critical patch for the browser. The IE roll-up is one of two critical bulletins expected next week; interestingl...
Microsoft SharePoint Callback Function Elevation of Privilege (MS13-024) - Ver2 (CVE-2013-0080)
An information disclosure and elevation of privilege vulnerability has been reported in Microsoft SharePoint. The vulnerability is due to an error in the way Microsoft SharePoint handles specially crafted URLs containing malicious JavaScript elements. A remote attacker may exploit this issue by...
Microsoft SharePoint Server WAS Memory Corruption Vulnerability (2949660)
This host is missing a critical security update according to Microsoft Bulletin MS14-017. SPDX-FileCopyrightText: 2014 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only CPE =...
MS14-017: Description of the security update for Word Automation Services in SharePoint Server 2010: April 8, 2014
Resolves vulnerabilities in Microsoft Office that could allow remote code execution if a specially crafted file is opened in an affected version of Office.View products that this article applies to.IntroductionThis update resolves vulnerabilities in Microsoft Office that could allow remote code...
CVE-2014-1761
Microsoft Word 2003 SP3, 2007 SP3, 2010 SP1 and SP2, 2013, and 2013 RT; Word Viewer; Office Compatibility Pack SP3; Office for Mac 2011; Word Automation Services on SharePoint Server 2010 SP1 and SP2 and 2013; Office Web Apps 2010 SP1 and SP2; and Office Web Apps Server 2013 allow remote attacker...
CVE-2014-1761
Microsoft Word 2003 SP3, 2007 SP3, 2010 SP1 and SP2, 2013, and 2013 RT; Word Viewer; Office Compatibility Pack SP3; Office for Mac 2011; Word Automation Services on SharePoint Server 2010 SP1 and SP2 and 2013; Office Web Apps 2010 SP1 and SP2; and Office Web Apps Server 2013 allow remote attacker...
Microsoft Word CVE-2014-1761 Remote Memory Corruption Vulnerability
Description Microsoft Word is prone to a remote memory-corruption vulnerability. An attacker can exploit this issue to execute arbitrary code in the context of the currently logged-in user. Failed exploit attempts will likely result in denial-of-service conditions. Technologies Affected Microsoft...