5711 matches found
Microsoft Office CVE-2017-0030 Memory Corruption Vulnerability
Description Microsoft Office is prone to a remote memory-corruption vulnerability. An attacker can leverage this issue to execute arbitrary code in the context of the currently logged-in user. Failed exploit attempts will likely result in denial of service conditions. Technologies Affected...
KLA10980 Multiple vulnerabilities in Microsoft Office
Multiple vulnerabilities were found in Microsoft Office. Malicious users can exploit these vulnerabilities to obtain sensitive information, execute arbitrary code. Below is a complete list of vulnerabilities: 1. An information disclosure vulnerability in Windows GDI can be exploited remotely via...
Microsoft Office CVE-2017-0105 Information Disclosure Vulnerability
Description Microsoft Office is prone to an information-disclosure vulnerability. Attackers can exploit this issue to obtain sensitive information that may aid in further attacks. Technologies Affected Microsoft Office 2010 32-bit edition SP2 Microsoft Office 2010 64-bit edition SP2 Microsoft...
JustSystems Ichitaro Heap Buffer Overflow Vulnerability
JustSystems Ichitaro is a suite of word processing software from the Japanese company JustSystems. A heap buffer overflow vulnerability in the Ichitaro word processor in JustSystems Ichitaro allows remote attackers to exploit the vulnerability to construct malicious files that can be parsed by th...
JustSystems Ichitaro Buffer Overflow Vulnerability
JustSystems Ichitaro is a suite of word processing software from the Japanese company JustSystems. A heap-based buffer overflow vulnerability exists in the Ichitaro word processor in JustSystems Ichitaro, which allows remote attackers to build malicious files that can be parsed by the user, causi...
Ichitaro Word Processor PersistDirectory Code Execution Vulnerability
Summary Ichitaro Office contains a vulnerability that exists when trying to open a specially crafted PowerPoint file. Due to the application incorrectly handling the error case for a function’s result, the application will use this result in a pointer calculation for reading file data into. Due t...
Ichitaro Office JTD Figure handling Code Execution Vulnerability
Summary A vulnerability was discovered within the Ichitaro word processor. Ichitaro is published by JustSystems and is considered one of the more popular word processors used within Japan. Ichitaro’s proprietary file format is a Compound Document similar to .doc for Microsoft Word called .jtd. Wh...
Malware Hijacks Microphones to Spy On Ukrainian Businesses, Scientists and Media
Ukraine has once again been a target of a potential hacking attack that infected computer systems from dozens of Ukrainian businesses with highly sophisticated malware, allowing hackers to exfiltrate sensitive data and eavesdrop on their network. Late last year, the country also suffered a power...
Microsoft Office Word Malicious Macro Execution
This module injects a malicious macro into a Microsoft Office Word document docx. The comments field in the metadata is injected with a Base64 encoded payload, which will be decoded by the macro and execute as a Windows executable. For a successful attack, the victim is required to manually enabl...
Watch Out! First-Ever Word Macro Malware for Apple Mac OS Discovered in the Wild
After targeting Windows-based computers over the past few years, hackers are now shifting their interest to Macs as well. The emergence of the first macro-based Word document attack against Apple's macOS platform is the latest example to prove this. The concept of Macros dates back to 1990s. You...
Security Update for Word Viewer (KB3128043)
A security vulnerability exists in Word Viewer that could allow arbitrary code to run when a maliciously modified file is opened. This update resolves that vulnerability...
Security Update for Word Viewer (KB3118394)
A security vulnerability exists in Word Viewer that could allow arbitrary code to run when a maliciously modified file is opened. This update resolves that vulnerability...
backdoorppt - transform your payload.exe into one fake word doc (.ppt)
backdoorppt - 'Office spoof extensions tool' Version release: v1.5-Stable Distros Supported: Linux Kali, Ubuntu, Mint Author: pedro ubuntu r00t-3xp10it Suspicious-Shell-Activity© SSA RedTeam develop @2017 Transform your payload.exe into one fake word doc .ppt Simple script that allow users to add...
Spammers Revive Hancitor Downloader Campaigns
A recent lull in the distribution of spam spreading information-stealing malware via the Hancitor downloader has been snapped. Researchers at the SANS Internet Storm Center are currently tracking an increase in spam purporting to be a forwarded parking ticket notification. The message prompts the...
Microsoft Office Word Remote Code Execution Vulnerability (3214291)
This host is missing an important security update according to Microsoft Bulletin MS17-002 SPDX-FileCopyrightText: 2017 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only...
CVE-2017-0003
Microsoft Word 2016 and SharePoint Enterprise Server 2016 allow remote attackers to execute arbitrary code via a crafted document, aka "Microsoft Office Memory Corruption Vulnerability."...
Memory corruption
Microsoft Word 2016 and SharePoint Enterprise Server 2016 allow remote attackers to execute arbitrary code via a crafted document, aka "Microsoft Office Memory Corruption Vulnerability."...
CVE-2017-0003
Microsoft Word 2016 and SharePoint Enterprise Server 2016 allow remote attackers to execute arbitrary code via a crafted document, aka "Microsoft Office Memory Corruption Vulnerability."...
CVE-2017-0003
CVE-2017-0003 affects Microsoft Word 2016 and SharePoint Enterprise Server 2016 (Office memory corruption vulnerability). The underlying issue is a memory handling flaw that can allow remote code execution when a specially crafted Office file is opened. In affected products, exploitation requires...
