217 matches found
CVE-2018-8307
CVE-2018-8307 is a WordPad security feature bypass affecting multiple Windows versions (e.g., Windows 7, 8.1, 10, and corresponding Server editions) where embedded OLE objects are improperly handled. The vulnerability is described as a bypass of security features when WordPad processes OLE object...
Microsoft Windows Multiple Vulnerabilities (KB4338819)
This host is missing a critical security update according to Microsoft KB4338819 SPDX-FileCopyrightText: 2018 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only ifdescription...
Microsoft Windows Multiple Vulnerabilities (KB4338825)
This host is missing a critical security update according to Microsoft KB4338825 SPDX-FileCopyrightText: 2018 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only ifdescription...
Microsoft Windows Multiple Vulnerabilities (KB4338826)
This host is missing a critical security update according to Microsoft KB4338826 SPDX-FileCopyrightText: 2018 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only ifdescription...
Microsoft Windows Multiple Vulnerabilities (KB4338818)
This host is missing a critical security update according to Microsoft KB4338818 SPDX-FileCopyrightText: 2018 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only ifdescription...
Description of the security update for the security feature bypass vulnerability in Windows Server 2008, Windows Embedded POSReady 2009, and Windows Embedded Standard 2009: July 10, 2018
None None...
WordPad Security Feature Bypass Vulnerability
A security feature bypass vulnerability exists when Microsoft WordPad improperly handles embedded OLE objects. An attacker who successfully exploited the vulnerability could bypass content blocking. In a file-sharing attack scenario, an attacker could provide a specially crafted document file...
KLA11285 Multiple vulnerabilities in Microsoft Windows
Multiple serious vulnerabilities were found in Microsoft Windows. Malicious users can exploit these vulnerabilities to obtain sensitive information, bypass security restrictions, cause denial of service. Below is a complete list of vulnerabilities: 1. Multiple vulnerabilities in Windows kernel ca...
KB4338823: Windows 7 and Windows Server 2008 R2 July 2018 Security Update
The remote Windows host is missing security update 4338823 or cumulative update 4338818. It is, therefore, affected by multiple vulnerabilities : - An elevation of privilege vulnerability exists in .NET Framework which could allow an attacker to elevate their privilege level. CVE-2018-8202 - A...
Microsoft WordPad CVE-2018-8307 Security Bypass Vulnerability
Description Microsoft WordPad is prone to a security-bypass vulnerability because it fails to properly handle input. Attackers can exploit this issue to bypass certain security restrictions to perform unauthorized actions. This may aid in further attacks. Technologies Affected Microsoft Windows 1...
KB4338820: Windows Server 2012 July 2018 Security Update
The remote Windows host is missing security update 4338820 or cumulative update 4338830. It is, therefore, affected by multiple vulnerabilities : - A denial of service vulnerability exists in Windows Domain Name System DNS DNSAPI.dll when it fails to properly handle DNS responses. An attacker who...
KB4338829: Windows 10 July 2018 Security Update
The remote Windows host is missing security update 4338829. It is, therefore, affected by multiple vulnerabilities : - A remote code execution vulnerability exists in the way that the scripting engine handles objects in memory in Internet Explorer. The vulnerability could corrupt memory in such a...
KB4338824: Windows 8.1 and Windows Server 2012 R2 July 2018 Security Update
The remote Windows host is missing security update 4338824 or cumulative update 4338815. It is, therefore, affected by multiple vulnerabilities : - An elevation of privilege vulnerability exists in .NET Framework which could allow an attacker to elevate their privilege level. CVE-2018-8202 - A...
Microsoft WordPad Font Conversion Remote Code Execution (CVE-2004-0901) - Ver2
A remote code execution vulnerability exists in Microsoft. Successful exploitation of this vulnerability could allow a remote attacker to execute arbitrary code on the affected system...
Microsoft Office Memory Corruption Vulnerability (CNVD-2018-02190)
Microsoft Office 2003 and so on are the United States Microsoft Microsoft company developed an office software suite of products.Equation Editor is one of the formula editor. A memory corruption vulnerability exists in Equation Editor in Microsoft Office, which arises from the program failing to...
Microsoft Office Memory Corruption Vulnerability (CNVD-2018-00904)
Microsoft Office is a suite of office software products developed by Microsoft.Equation Editor is one of the formula editors. A memory corruption vulnerability exists in Equation Editor in Microsoft Office, which arises from the program failing to properly handle objects in memory. The...
Microsoft Office Memory Corruption Vulnerability (CNVD-2018-00884)
Microsoft Office is a suite of office software products developed by Microsoft.Equation Editor is one of the formula editors. A memory corruption vulnerability exists in Equation Editor in Microsoft Office, which arises from the program failing to properly handle objects in memory. The...
PT-2018-1027
Name of the Vulnerable Software and Affected Versions Microsoft Office 2007 Microsoft Office 2010 Microsoft Office 2013 Microsoft Office 2016 Microsoft Office Compatibility Pack affected versions not specified Microsoft WordPad affected versions not specified Description A remote code execution...
KB4014793: Microsoft Wordpad Remote Code Execution vulnerability (April 2017)
The remote Windows host is missing security update KB4014793. It is, therefore, affected by a remote code execution vulnerability in Windows WordPad due to improper validation of user-supplied input. An unauthenticated, remote attacker can exploit this, by convincing a user to open a specially...