8474 matches found
Description of the security update for Office 2016: December 10, 2019
None None...
Description of the security update for Excel 2013: December 10, 2019
Description of the security update for Excel 2013: December 10, 2019 Summary This security update resolves an information disclosure vulnerability that exists if Microsoft Excel imcorrectly discloses the contents of its memory. To learn more about the vulnerability, see Microsoft Common...
Description of the security update for Office 2013: December 10, 2019
Description of the security update for Office 2013: December 10, 2019 Summary This security update resolves an information disclosure vulnerability that exists if Microsoft Excel incorrectly discloses the contents of its memory. To learn more about the vulnerability, see Microsoft Common...
Microsoft Excel Information Disclosure Vulnerability
An information disclosure vulnerability exists when Microsoft Excel improperly discloses the contents of its memory. An attacker who exploited the vulnerability could use the information to compromise the user’s computer or data. To exploit the vulnerability, an attacker could craft a special...
KLA11617 Multiple vulnerabilities in Microsoft Office
Multiple vulnerabilities were found in Microsoft Office. Malicious users can exploit these vulnerabilities to execute arbitrary code, obtain sensitive information, spoof user interface. Below is a complete list of vulnerabilities: 1. A remote code execution vulnerability in Microsoft PowerPoint c...
Security Updates for Microsoft Office Products (December 2019)
The Microsoft Office Products are missing security updates. It is, therefore, affected by multiple vulnerabilities : - An information disclosure vulnerability exists when Microsoft Excel improperly discloses the contents of its memory. An attacker who exploited the vulnerability could use the...
Microsoft Excel CVE-2019-1464 Information Disclosure Vulnerability
Description Microsoft Excel is prone to an information-disclosure vulnerability. Attackers can exploit this issue to obtain sensitive information that may aid in further attacks. Technologies Affected Microsoft Excel 2010 SP2 32-bit editions Microsoft Excel 2010 SP2 64-bit editions Microsoft Exce...
Security Updates for Microsoft Excel Products (December 2019)
The Microsoft Excel Products are missing a security update. It is, therefore, affected by the following vulnerability : - An information disclosure vulnerability exists when Microsoft Excel improperly discloses the contents of its memory. An attacker who exploited the vulnerability could use the...
Excelerating Analysis – Tips and Tricks to Analyze Data with Microsoft Excel
Incident response investigations don’t always involve standard host-based artifacts with fully developed parsing and analysis tools. At FireEye Mandiant, we frequently encounter incidents that involve a number of systems and solutions that utilize custom logging or artifact data. Determining what...
The vulnerability of Microsoft Excel, Office, Office 365, Microsoft SharePoint Enterprise Server, and Office Online Server packages lies in the fact that operations are performed outside of the buffer in memory, allowing an intruder to gain unauthorized access to protected information.
The vulnerability of Microsoft Excel, Office, Office 365, Microsoft SharePoint Enterprise Server, and Office Online Server packages relates to the execution of operations outside the buffer in memory. Exploiting this vulnerability can allow an attacker to gain unauthorized access to protected...
The vulnerability of Microsoft Excel, Office, and Office 365 software lies in insufficient validation of input data, which allows attackers to execute arbitrary code.
The vulnerability of Microsoft Excel, Office, and Office 365 packages is related to insufficient validation of input data. Exploiting this vulnerability allows attackers to execute arbitrary code using a specially created file...
Microsoft Excel 2016 1901 - XML External Entity Injection
Microsoft Excel 2016 1901 - XML External Entity Injection Exploit Title: Microsoft Excel 2016 1901 - XML External Entity Injection Discovery by: hyp3rlinx Date: 2019-12-02 Vendor Homepage: www.microsoft.com Tested Version: 2016 v1901 CVE: N/A + Credits: John Page aka hyp3rlinx + Website:...
Microsoft Excel XML External Entity Injection Vulnerability
Microsoft Excel is a spreadsheet developed by Microsoft for Windows, macOS, Android and iOS. Microsoft Excel suffers from an XML external entity injection vulnerability that can be exploited by attackers to obtain sensitive information...
Microsoft Excel 2016 1901 - XML External Entity Injection
Exploit Title: Microsoft Excel 2016 1901 - XML External Entity Injection Discovery by: hyp3rlinx Date: 2019-12-02 Vendor Homepage: www.microsoft.com Tested Version: 2016 v1901 CVE: N/A + Credits: John Page aka hyp3rlinx + Website: hyp3rlinx.altervista.org + Source:...
Microsoft Excel 2016 XML External Entity Information Disclosure Vulnerability
Description Microsoft Excel 2016 is prone to an information-disclosure vulnerability. Attackers can exploit this issue to obtain sensitive information that may lead to further attacks. Technologies Affected Microsoft Excel 2016 1901 Recommendations Deploy network intrusion detection systems to...
Microsoft Excel 2016 1901 Import Error XML Injection Vulnerability
Credits: John Page aka hyp3rlinx + Website: hyp3rlinx.altervista.org + Source: http://hyp3rlinx.altervista.org/advisories/MICROSOFT-EXCEL-2016-v1901-IMPORT-ERROR-EXTERNAL-ENTITY-INJECTION.txt + ISR: ApparitionSec Vendor www.microsoft.com Product Excel 2016 v1901 Microsoft Excel is a spreadsheet...
Microsoft Excel 2016 1901 Import Error XML Injection
Credits: John Page aka hyp3rlinx + Website: hyp3rlinx.altervista.org + Source: http://hyp3rlinx.altervista.org/advisories/MICROSOFT-EXCEL-2016-v1901-IMPORT-ERROR-EXTERNAL-ENTITY-INJECTION.txt + ISR: ApparitionSec Vendor www.microsoft.com Product Excel 2016 v1901 Microsoft Excel is a spreadsheet...
Microsoft Excel 2013 Service Pack 1 Multiple Vulnerabilities (KB4484158)
This host is missing an important security update according to Microsoft KB4484158 Copyright C 2019 Greenbone Networks GmbH Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-or-later This...
Microsoft Excel 2010 Service Pack 2 Multiple Vulnerabilities (KB4484164)
This host is missing an important security update according to Microsoft KB4484164 Copyright C 2019 Greenbone Networks GmbH Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-or-later This...
Microsoft Office 2016 Information Disclosure Vulnerability (KB4484148)
This host is missing an important security update according to Microsoft KB4484148 Copyright C 2019 Greenbone Networks GmbH Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-or-later This...