CVE-2016-7193

Summary of CVE-2016-7193 : A memory corruption flaw in Microsoft Office’s handling of RTF documents allows remote code execution on affected Office products (Word 2007 SP2, Office 2010 SP2, Word 2013/2016, Word for Mac variants, Office Web Apps Server, etc.). The root cause is a vulnerability in ...

CVE-2016-7193

Microsoft Word 2007 SP2, Office 2010 SP2, Word 2013 SP1, Word 2013 RT SP1, Word 2016, Word for Mac 2011, Word 2016 for Mac, Office Compatibility Pack SP3, Word Viewer, Word Automation Services on SharePoint Server 2010 SP2, Word Automation Services on SharePoint Server 2013 SP1, Office Web Apps...

Microsoft Office Word Viewer Remote Code Execution Vulnerabilities (3192884)

This host is missing a critical security update according to Microsoft Bulletin MS16-120. SPDX-FileCopyrightText: 2016 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only...

Microsoft Office Word Viewer Remote Code Execution Vulnerability (3194063)

This host is missing an important security update according to Microsoft Bulletin MS16-121 SPDX-FileCopyrightText: 2016 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only...

Microsoft Office Word Remote Code Execution Vulnerability (3194063)

This host is missing an important security update according to Microsoft Bulletin MS16-121 SPDX-FileCopyrightText: 2016 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only...

MS16-121: Description of the security update for Word 2010: October 11, 2016

MS16-121: Description of the security update for Word 2010: October 11, 2016 Summary This security update resolves vulnerabilities in Microsoft Office that could allow remote code execution if a user opens a specially crafted Office file. To learn more about these vulnerabilities, see Microsoft...

MS16-121: Description of the security update for Word 2016: October 11, 2016

None None...

MS16-121: Description of the security update for Word Automation Services on SharePoint Server 2010: October 11, 2016

MS16-121: Description of the security update for Word Automation Services on SharePoint Server 2010: October 11, 2016 Summary This security update resolves vulnerabilities in Microsoft Office that could allow remote code execution if a user opens a specially crafted Office file. To learn more abo...

MS16-121: Description of the security update for Word 2013: October 11, 2016

MS16-121: Description of the security update for Word 2013: October 11, 2016 Summary This security update resolves vulnerabilities in Microsoft Office that could allow remote code execution if a user opens a specially crafted Office file. To learn more about these vulnerabilities, see Microsoft...

Microsoft Office Memory Corruption (MS16-121: CVE-2016-7193)

A buffer overflow vulnerability exists in the Word's RTF parser. The vulnerability is due to invalid parsing of RTF files. By enticing the user to open a specially crafted RTF file, an attacker could exploit this vulnerability to execute arbitrary code on the affected system...

PT-2016-3358 · Microsoft · Sharepoint Server +8

Name of the Vulnerable Software and Affected Versions: Microsoft Office versions 2007 SP2 through 2016 Microsoft Word versions 2007 SP2 through 2016 Microsoft Word for Mac versions 2011 through 2016 Office Compatibility Pack version SP3 Word Viewer affected versions not specified Word Automation...

KLA10883 OSI vulnerability in Microsoft Products

An information disclosure vulnerability was found in Microsoft Products. Malicious users can exploit this vulnerability to obtain sensitive information. Original advisories CVE-2016-3209 Exploitation Malware exists for this vulnerability. Usually such malware is classified as Exploit. More detail...

Microsoft Windows Graphics Component CVE-2016-3209 Information Disclosure Vulnerability

Description Microsoft Windows is prone to an information-disclosure vulnerability. Attackers can exploit this issue to obtain sensitive information that may aid in launching further attacks. Technologies Affected Microsoft .NET Framework 3.0 SP2 Microsoft .NET Framework 3.5 Microsoft .NET Framewo...

Microsoft Windows Graphics Component CVE-2016-3262 Information Disclosure Vulnerability

Description Microsoft Windows is prone to an information-disclosure vulnerability. Attackers can exploit this issue to obtain sensitive information that may aid in launching further attacks. Technologies Affected Microsoft Live Meeting 2007 Console Microsoft Lync 2010 32-bit Microsoft Lync 2010...

KLA10884 Code execution vulnerability in Microsoft Office

An improper RTF handling was found in Microsoft Office. By exploiting this vulnerability malicious users can execute arbitrary code. This vulnerability can be exploited remotely via a specially designed file. Original advisories CVE-2016-3263 CVE-2016-3209 CVE-2016-3262 CVE-2016-7182 CVE-2016-339...

Microsoft Office 365 Word - Code Execution Vulnerability

Document Title: =============== Microsoft Office 365 Word - Code Execution Vulnerability References Source: ==================== http://www.vulnerability-lab.com/getcontent.php?id=1030 Release Date: ============= 2016-10-01 Vulnerability Laboratory ID VL-ID: ====================================...

Microsoft Office 365 Word - Code Execution Vulnerability

Document Title: =============== Microsoft Office 365 Word - Code Execution Vulnerability References Source: ==================== http://www.vulnerability-lab.com/getcontent.php?id=1030 Release Date: ============= 2016-09-30 Vulnerability Laboratory ID VL-ID: ====================================...

bt177.net XSS vulnerability

Vulnerable URL: http://www.bt177.net/word/%22%3C/script%3E%3Csvg%20onload=alert/OPENBUGBOUNTY/%3E.html Details: Description| Value ---|--- Patched:| Yes, at 28.07.2017 Latest check for patch:| 28.07.2017 11:34 GMT Vulnerability type:| XSS Vulnerability status:| Publicly disclosed Alexa Rank| 4256...

Malware Evades Detection with Novel Technique

Researchers have found a new strain of document-based macro malware that evades discovery by lying dormant when it detects a security researcher’s test environment. The malware, according to researcher Caleb Fenton with security firm SentinelOne, evades detection simply by counting the number of...

Vulnerability of Microsoft Word, the corporate application suite Microsoft SharePoint Server, the Microsoft Office applications, and Microsoft Office Web Apps. Applications for reading doc files like Word Viewer, as well as the Office Web Apps Server, allow attackers to execute arbitrary code.

The vulnerability of Microsoft Word, the Microsoft SharePoint Server corporate application suite, the Microsoft Office application suite, and Microsoft Office Web Apps is due to an operation that goes beyond the buffer boundaries in memory. Exploiting this vulnerability allows a malicious actor t...