116 matches found
Microsoft Office Memory Corruption Vulnerability (CNVD-2018-00904)
Microsoft Office is a suite of office software products developed by Microsoft.Equation Editor is one of the formula editors. A memory corruption vulnerability exists in Equation Editor in Microsoft Office, which arises from the program failing to properly handle objects in memory. The...
Microsoft Office Remote Code Execution Vulnerability (CNVD-2018-00889)
Microsoft Office is a suite of office software products developed by Microsoft.Equation Editor is one of the formula editors. A remote code execution vulnerability exists in Equation Editor in Microsoft Office, which stems from the program failing to properly handle objects in memory. The...
Microsoft Office Memory Corruption Vulnerability (CNVD-2018-00884)
Microsoft Office is a suite of office software products developed by Microsoft.Equation Editor is one of the formula editors. A memory corruption vulnerability exists in Equation Editor in Microsoft Office, which arises from the program failing to properly handle objects in memory. The...
Microsoft Office Remote Code Execution Vulnerability (CNVD-2018-00888)
Microsoft Office is a suite of office software products developed by Microsoft.Equation Editor is one of the formula editors. A remote code execution vulnerability exists in Equation Editor in Microsoft Office that stems from the program not properly handling objects in memory. The vulnerability...
CVE-2018-0802
Equation Editor in Microsoft Office 2007, Microsoft Office 2010, Microsoft Office 2013, and Microsoft Office 2016 allow a remote code execution vulnerability due to the way objects are handled in memory, aka “Microsoft Office Memory Corruption Vulnerability”. This CVE is unique from CVE-2018-0797...
Microsoft Office Memory Corruption Vulnerability
A remote code execution vulnerability exists in Microsoft Office software when the software fails to properly handle objects in memory. An attacker who successfully exploited the vulnerability could run arbitrary code in the context of the current user. If the current user is logged on with...
Microsoft Office Memory Corruption Vulnerability
A remote code execution vulnerability exists in Microsoft Office software when the software fails to properly handle objects in memory. An attacker who successfully exploited the vulnerability could run arbitrary code in the context of the current user. If the current user is logged on with...
Microsoft Office Equation Memory Corruption Remote Code Execution (CVE-2018-0802)
A remote code execution vulnerability exists in Microsoft Office Equation Editor. The vulnerability is due to an error in the way Microsoft Office improperly handles objects in memory while parsing specially crafted files. A remote attacker can exploit this issue by enticing a victim to open a...
Microsoft Office Equation Editor Code Execution
This module requires Metasploit: https://metasploit.com/download Current source: https://github.com/rapid7/metasploit-framework class MetasploitModule 'Microsoft Office CVE-2017-11882', 'Description' = %q Module exploits a flaw in how the Equation Editor that allows an attacker to execute arbitra...
Threat Analysis: Equation Equals Backdoor
On November 20, 2017 the exploit for CVE-2017-11882 was publicly released, which allowed for code execution in vulnerable versions of Microsoft’s Equation editor. CVE-2017-11882 affects the following versions of Microsoft Office: Microsoft Office 2007 Service Pack 3 Microsoft Office 2010 Service...
Microsoft Office Memory Corruption Remote Code Execution (CVE-2017-11882)
A remote code execution vulnerability exists in Microsoft Office Equation Editor. The vulnerability is due to an error in the way Microsoft Office improperly handles objects in memory while parsing specially crafted files. A remote attacker can exploit this issue by enticing a victim to open a...
Microsoft office component EQNEDT32.EXE memory corruption vulnerability
Microsoft Office is a suite of office software based on the Windows operating system developed by Microsoft. A memory corruption vulnerability exists in EQNEDT32.EXE, the MS Office component of Microsoft office that is responsible for inserting and editing formulas OLE objects in documents...
Microsoft Patches 17-Year-Old Office Bug
Microsoft on Tuesday patched a 17-year-old remote code execution bug found in an Office executable called Microsoft Equation Editor. The vulnerability CVE-2017-11882 was patched as part of Microsoft’s November Patch Tuesday release of 53 fixes. While Microsoft rates the vulnerability only as...
Microsoft Office CVE-2017-11882
Module exploits a flaw in how the Equation Editor that allows an attacker to execute arbitrary code in RTF files without interaction. The vulnerability is caused by the Equation Editor, to which fails to properly handle OLE objects in memory. Module Options msf use...
Microsoft Office Equation Editor stack buffer overflow
Overview Microsoft Equation Editor contains a stack buffer overflow, which can allow a remote, unauthenticated attacker to execute arbitrary code on a vulnerable system. Description Microsoft Equation Editor is a component that comes with Microsoft Office. It is an out-of-process COM server that ...
