Microsoft Office Word Remote Code Execution Vulnerabilities (3038999)

This host is missing a critical security update according to Microsoft Bulletin MS15-022. SPDX-FileCopyrightText: 2015 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only...

Microsoft Office CVE-2015-0085 Use After Free Remote Code Execution Vulnerability

Description Microsoft Office is prone to a remote code-execution vulnerability because it fails to properly handle objects in memory. An attacker can leverage this issue to execute arbitrary code in the context of the currently logged-in user. Failed exploit attempts will likely result in...

Microsoft Word CVE-2015-0097 Memory Corruption Vulnerability

Description Microsoft Word is prone to a memory-corruption vulnerability. Attackers can exploit this issue to execute arbitrary code in the context of the currently logged-in user. Failed attacks will cause denial-of-service conditions. Technologies Affected Microsoft Excel 2007 SP3 Microsoft Exc...

Microsoft Word Local Zone Remote Code Execution (MS15-022; CVE-2015-0097)

A remote code execution vulnerability exists in Microsoft Office. The vulnerability is caused when the Office software improperly handles objects in memory while parsing specially crafted Office files. A remote attacker can exploit this issue by enticing a user to open a specially crafted office...

Threat Outbreak Alert RuleID13860: Email Messages Distributing Malicious Software on March 9, 2015

Medium Alert ID: 37753 First Published: 2015 March 6 18:32 GMT Last Updated: 2015 March 9 20:52 GMT Version: 2 Summary Cisco Security has detected significant activity related to spam email messages distributing malicious software. Email messages that are related to this threat RuleID13860 may...

Microsoft Word 2007 - RTF Object Confusion (ASLR + DEP Bypass)

Microsoft Word 2007 - RTF Object Confusion ASLR + DEP Bypass Title : Microsoft Office Word 2007 - RTF Object Confusion ASLR and DEP bypass Date : 28/02/2015 Author : R-73eN Software : Microsoft Office Word 2007 Tested : Windows 7 Starter import sys Windows Message Box / all versions . Thanks to...

Microsoft Word 2007 - RTF Object Confusion (ASLR + DEP Bypass)

Title : Microsoft Office Word 2007 - RTF Object Confusion ASLR and DEP bypass Date : 28/02/2015 Author : R-73eN Software : Microsoft Office Word 2007 Tested : Windows 7 Starter import sys Windows Message Box / all versions . Thanks to Giuseppe D'amore for the shellcode . shellcode =...

(0Day) Microsoft Word Line Formatting Denial of Service Vulnerability

This vulnerability allows remote attackers to create a denial of service condition on vulnerable installations of Microsoft Word. User interaction is required to exploit this vulnerability in that the target must visit a malicious page or open a malicious file. The specific flaw exists within the...

[SECURITY] Fedora 20 Update: apache-poi-3.10.1-2.fc20

The Apache POI Project's mission is to create and maintain Java APIs for manipulating various file formats based upon the Office Open XML standards OOXML and Microsoft's OLE 2 Compound Document format OLE2. In short, you can read and write MS Excel files using Java. In addition, you can read and...

CVE-2015-0064

Microsoft Word 2007 SP3, Office 2010 SP2, Word 2010 SP2, Word Automation Services in SharePoint Server 2010, Web Applications 2010 SP2, Word Viewer, and Office Compatibility Pack SP3 allow remote attackers to execute arbitrary code or cause a denial of service memory corruption via a crafted Offi...

CVE-2015-0065

Microsoft Word 2007 SP3 allows remote attackers to execute arbitrary code or cause a denial of service memory corruption via a crafted Office document, aka "OneTableDocumentStream Remote Code Execution Vulnerability."...

Remote code execution

Microsoft Word 2007 SP3 allows remote attackers to execute arbitrary code or cause a denial of service memory corruption via a crafted Office document, aka "OneTableDocumentStream Remote Code Execution Vulnerability."...

CVE-2015-0065

CVE-2015-0065 affects Microsoft Word 2007 SP3 (and related Office versions) via a memory‑handling flaw in parsing crafted Office files, allowing remote code execution or memory corruption/DoS when a user opens a malicious document. The root cause is improper handling of objects in memory during d...

CVE-2015-0064

CVE-2015-0064 corresponds to a memory-corruption remote-code-execution vulnerability in Microsoft Word 2007 SP3, Office 2010 SP2, Word Automation Services in SharePoint Server 2010, Web Applications 2010 SP2, Word Viewer and Office Compatibility Pack SP3. The issue arises when processing a crafte...

CVE-2015-0065

Microsoft Word 2007 SP3 allows remote attackers to execute arbitrary code or cause a denial of service memory corruption via a crafted Office document, aka "OneTableDocumentStream Remote Code Execution Vulnerability."...

CVE-2015-0064

Microsoft Word 2007 SP3, Office 2010 SP2, Word 2010 SP2, Word Automation Services in SharePoint Server 2010, Web Applications 2010 SP2, Word Viewer, and Office Compatibility Pack SP3 allow remote attackers to execute arbitrary code or cause a denial of service memory corruption via a crafted Offi...

Microsoft Word Memory Corruption Vulnerability (CNVD-2015-01102)

Microsoft Word is a word processing system developed by Microsoft. A memory corruption vulnerability exists in Microsoft Word. Allows a remote attacker to execute arbitrary code or cause a denial of service memory crash via a crafted Office document...

Microsoft Word Memory Corruption Vulnerability (CNVD-2015-01100)

Microsoft Word is a word processing system developed by Microsoft. A memory corruption vulnerability exists in Microsoft Word. Allows a remote attacker to execute arbitrary code or cause a denial of service memory crash via a crafted Office document...

Microsoft Word Memory Corruption Vulnerability (CNVD-2015-01101)

Microsoft Word is a word processing system developed by Microsoft. A memory corruption vulnerability exists in Microsoft Word. Allows a remote attacker to execute arbitrary code or cause a denial of service memory crash via a crafted Office document...

Microsoft Office Word Viewer Remote Code Execution Vulnerability (3032328)

This host is missing an important security update according to Microsoft Bulletin MS15-012. SPDX-FileCopyrightText: 2015 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only...