CVE-2016-3358: Improper Restriction of Operations within the Bounds of a Memory Buffer

Microsoft Excel 2007 SP3, Excel 2010 SP2, Excel 2013 SP1, Excel 2013 RT SP1, Excel 2016, Excel 2016 for Mac, Office Compatibility Pack SP3, Excel Viewer, Excel Services on SharePoint Server 2007 SP3, Excel Services on SharePoint Server 2010 SP2, Excel Automation Services on SharePoint Server 2013...

CVE-2016-3361: Improper Restriction of Operations within the Bounds of a Memory Buffer

Microsoft Excel 2010 SP2 allows remote attackers to execute arbitrary code via a crafted document, aka "Microsoft Office Memory Corruption Vulnerability."...

CVE-2016-3356: Improper Restriction of Operations within the Bounds of a Memory Buffer

The Graphics Device Interface GDI in Microsoft Windows 10 1607 allows remote attackers to execute arbitrary code via a crafted document, aka "GDI Remote Code Execution Vulnerability."...

CVE-2016-3364: Improper Restriction of Operations within the Bounds of a Memory Buffer

Microsoft Visio 2016 allows remote attackers to execute arbitrary code via a crafted document, aka "Microsoft Office Memory Corruption Vulnerability."...

CVE-2016-3357: Improper Restriction of Operations within the Bounds of a Memory Buffer

Microsoft Office 2007 SP3, Office 2010 SP2, Office 2013 SP1, Office 2013 RT SP1, Office 2016, Word for Mac 2011, Word 2016 for Mac, Word Viewer, Word Automation Services on SharePoint Server 2010 SP2, SharePoint Server 2013 SP1, Excel Automation Services on SharePoint Server 2013 SP1, Word...

CVE-2016-3381: Improper Restriction of Operations within the Bounds of a Memory Buffer

Microsoft Excel 2007 SP3, Excel 2010 SP2, Excel 2013 SP1, Excel 2013 RT SP1, Excel 2016, Office Compatibility Pack SP3, and Excel Viewer allow remote attackers to execute arbitrary code via a crafted document, aka "Microsoft Office Memory Corruption Vulnerability," a different vulnerability than...

CVE-2016-3363: Improper Restriction of Operations within the Bounds of a Memory Buffer

Microsoft Excel 2007 SP3, Excel 2010 SP2, Excel 2013 SP1, Excel 2013 RT SP1, Excel 2016, Office Compatibility Pack SP3, and Excel Viewer allow remote attackers to execute arbitrary code via a crafted document, aka "Microsoft Office Memory Corruption Vulnerability," a different vulnerability than...

PT-2016-2735

Name of the Vulnerable Software and Affected Versions Microsoft Excel versions 2007 SP3, 2010 SP2, 2013 SP1, 2013 RT SP1, 2016 Office Compatibility Pack version SP3 Excel Viewer affected versions not specified Excel Services on SharePoint Server versions 2007 SP3, 2010 SP2 Excel Automation Servic...

PT-2016-2733

Name of the Vulnerable Software and Affected Versions Microsoft Visio versions 2016 Description The issue is caused by a buffer overflow in memory, allowing a remote attacker to execute arbitrary code using a specially crafted document. This can lead to the execution of malicious code...

PT-2016-2736

Name of the Vulnerable Software and Affected Versions Microsoft Excel versions prior to the fixed version Description The issue is caused by a buffer overflow in memory, allowing a remote attacker to execute arbitrary code using a specially crafted document. Multiple remote code execution...

PT-2016-2734

Name of the Vulnerable Software and Affected Versions Microsoft Excel versions 2007 SP3 through 2016 Office Compatibility Pack version SP3 Excel Viewer version affected versions not specified Description The issue is caused by a memory corruption vulnerability in Microsoft Excel, allowing remote...

PT-2016-2738

Name of the Vulnerable Software and Affected Versions Microsoft Excel versions 2007 SP3 through 2010 SP2 Office Compatibility Pack version SP3 Excel Viewer version affected versions not specified Description The issue is caused by a memory corruption vulnerability that allows remote attackers to...

PT-2016-5439

Name of the Vulnerable Software and Affected Versions Microsoft Excel versions 2007 SP3 through 2016 Office Compatibility Pack version SP3 Excel Viewer affected versions not specified Description The issue allows remote attackers to execute arbitrary code via a crafted document. Multiple remote...

Foxit Reader and PhantomPDF Remote Code Execution Vulnerability (CNVD-2016-06997)

Foxit Reader is China's Foxit Foxit Software Corporation produced a small PDF document viewing and printing program, PhantomPDF is a commercial version. Foxit Reader and PhantomPDF 8.0.0.624 and earlier versions have a security vulnerability that can be triggered when opening a carefully...

The vulnerability of the Microsoft Office suite of programs, the Microsoft Word text editor, the Word Viewer program for reading DOC files, and the Microsoft Office Compatibility Pack allows a perpetrator to execute arbitrary code.

The vulnerability of the Microsoft Office package, the Microsoft Word text editor, the Word Viewer document viewing program, and the Microsoft Office Compatibility Pack is caused by a buffer overflow. Exploiting this vulnerability allows an attacker to execute arbitrary code using a specially...

Microsoft Office Memory Corruption Vulnerability (CNVD-2016-06268)

Microsoft Office is a suite of office software based on the Windows operating system developed by Microsoft. A memory corruption vulnerability exists in Microsoft Office due to the program not properly handling memory objects. Allowing a remote attacker to pass through a constructed Office...

The vulnerability of the libxml2 library, which allows a hacker to trigger a service failure

The vulnerability in the dict.c function of the libxml2 library arises due to buffer overflow. Exploiting this vulnerability can allow an attacker, operating remotely, to cause a service failure termination of the application by using a special symbol after the "!DOCTYPE html" tag in a specially...

OpenJDK: insufficient enforcement of totalEntitySizeLimit (JAXP, 8133962)

It was discovered that the JAXP component in OpenJDK did not properly enforce the totalEntitySizeLimit limit. An attacker able to make a Java application process a specially crafted XML file could use this flaw to make the application consume an excessive amount of memory...

CVE-2016-3280

Microsoft Word 2007 SP3, Office 2010 SP2, Word 2010 SP2, Word 2013 SP1, Word 2013 RT SP1, Word for Mac 2011, Word 2016 for Mac, Office Compatibility Pack SP3, and Word Viewer allow remote attackers to execute arbitrary code via a crafted Office document, aka "Microsoft Office Memory Corruption...

CVE-2016-3280

Microsoft Word 2007 SP3, Office 2010 SP2, Word 2010 SP2, Word 2013 SP1, Word 2013 RT SP1, Word for Mac 2011, Word 2016 for Mac, Office Compatibility Pack SP3, and Word Viewer allow remote attackers to execute arbitrary code via a crafted Office document, aka "Microsoft Office Memory Corruption...