5715 matches found
Security Update for Microsoft Word 2013 (KB4011695) 32-Bit Edition
A security vulnerability exists in Microsoft Word 2013 32-Bit Edition that could allow arbitrary code to run when a maliciously modified file is opened. This update resolves that vulnerability...
Hancitor: fileless attack with a DLL copy trick
This article was authored by David Sánchez, Mickaël Roger, and Jérôme Segura During the past few years, malicious spam campaigns have proven to be one of the most efficient infection vectors, in part due to a combination of social engineering and a regular number of Office vulnerabilities. The...
Description of the security update for Word Viewer: March 13, 2018
None None...
End of support for Office 2010
End of support for Office 2010 Support for Office 2010 ended on October 13, 2020 and there will be no extension and no extended security updates.Buy or try Microsoft 365 Tip: Not sure what version of Office you have? See Find details for other versions of Office to help you determine what version...
Description of the security update for Word 2013: March 13, 2018
Description of the security update for Word 2013: March 13, 2018 Summary This security update resolves vulnerabilities in Microsoft Office that could allow remote code execution if a user opens a specially crafted Office file. To learn more about these vulnerabilities, see Microsoft Common...
End of support for Office 2016 and Office 2019
None None...
Microsoft Office CVE-2018-0922 Memory Corruption Vulnerability
Description Microsoft Office is prone to a memory-corruption vulnerability. An attacker can leverage this issue to execute arbitrary code in the context of the currently logged-in user. Failed exploit attempts will likely result in denial of service conditions. Technologies Affected Microsoft...
Security Updates for Microsoft Word Products (March 2018)
The Microsoft Word Products are missing security updates. It is, therefore, affected by multiple vulnerabilities : - An information disclosure vulnerability exists when Microsoft Office software reads out of bound memory due to an uninitialized variable, which could disclose the contents of memor...
Solaris 10 (sparc) : 151723-01
GNOME 2.6.0: word-list-compress Patch. Date this patch was last updated by Sun : Feb/11/16 %NASLMINLEVEL 70300 C Tenable Network Security, Inc. The descriptive text in this plugin was extracted from the Oracle SunOS Patch Updates. include'deprecatednasllevel.inc'; include'compat.inc'; if...
Solaris 10 (x86) : 151724-01
GNOME 2.6.0x86: word-list-compress Patch. Date this patch was last updated by Sun : Feb/11/16 %NASLMINLEVEL 70300 C Tenable Network Security, Inc. The descriptive text in this plugin was extracted from the Oracle SunOS Patch Updates. include'deprecatednasllevel.inc'; include'compat.inc'; if...
March 6, 2018, update for Office 2016 (KB4011624)
None None...
VulnCheck KEV: CVE-2014-7187
Off-by-one error in the readtokenword function in parse.y in GNU Bash through 4.3 bash43-026 allows remote attackers to cause a denial of service out-of-bounds array access and application crash or possibly have unspecified other impact via deeply nested for loops, aka the "wordlineno" issue...
Memory Corruption Vulnerability in WPS Office 2016 Text wpsdocxrw Module
WPS office is an office software suite independently developed by Kingsoft Corporation. A memory corruption vulnerability exists in the wpsdocxrw module of WPS text wps.exe in WPS when parsing a specific docx file. An attacker can exploit the vulnerability to cause a denial of service...
Massive Spam Campaign Targets Unpatched Systems
Cybercriminals are leveraging a recently patched critical Adobe Flash Player vulnerability in a massive spam campaign targeting unpatched computers. According to cybersecurity firm Morphisec, cybercriminals are blasting spam messages that urge recipients to click a link to download a Word documen...
MS Word Maybe Used for Cryptojacking Attacks
By David Balaban Cryptojacking JavaScript can be launched in Word documents - New This is a post from HackRead.com Read the original post: MS Word Maybe Used for Cryptojacking Attacks...
A week in security (February 19 – February 25)
Last week on Malwarebytes Labs, we gave readers a primer on encryption, took a stab at that Deepfakes tool Internet users seem to be interested in, and started a new series that talks about GDPR. We also looked at a drive-by download campaign that starts in booby-trapped Chinese websites that dro...
Disappearing bytes: Reverse engineering the MS Office RTF parser
Microsoft Office was a prime target for attacks in 2017. As well as the large number of vulnerabilities discovered and proof-of-concept exploits published, malware authors felt it necessary to prevent detection of 'one-day' and 'old-day' exploits by antivirus software. It also became clear that...
The vulnerability affects the editor for mathematical formulas and equations in the Microsoft Word text editor, as well as the Microsoft Office suite of programs and the Microsoft Office Compatibility Pack. This vulnerability allows a perpetrator to execute arbitrary code.
The vulnerability of the editor for mathematical formulas and equations in the Microsoft Word text editor, as well as in the Microsoft Office suite of programs and the Microsoft Office Compatibility Pack, arises due to an operation that goes beyond the buffer in memory. Exploiting this...
The vulnerability of the editor for mathematical formulas and equations in the Microsoft Word text editor, as well as in the Microsoft Office suite of programs and the Microsoft Office Compatibility Pack, allows a perpetrator to execute arbitrary code.
The vulnerability of the editor for mathematical formulas and equations in the Microsoft Word text editor, as well as in the Microsoft Office suite of programs and the Microsoft Office Compatibility Pack, arises from an operation that goes beyond the buffer boundaries in memory. Exploiting this...
The vulnerability affects the editor for mathematical formulas and equations in the Microsoft Office program suite, the Microsoft Office Compatibility Pack, and the Microsoft Word text editor. This allows a perpetrator to execute arbitrary code.
The vulnerability of the editor for mathematical formulas and equations in the Microsoft Office program suite, the Microsoft Office Compatibility Pack, and the Microsoft Word text editor is due to an operation going beyond the buffer boundaries in memory. Exploiting this vulnerability could allow...