Microsoft Office Excel xls File Out-Of-Bounds Read Information Disclosure Vulnerability

This vulnerability allows remote attackers to disclose sensitive information on vulnerable installations of Microsoft Office Excel. User interaction is required to exploit this vulnerability in that the target must visit a malicious page or open a malicious file. The specific flaw exists within t...

Description of the security update for the Microsoft Jet database engine remote code execution vulnerability: October 10, 2017

None None...

"Unexpected error from external database driver" error when you create or open Microsoft Excel .xls files

None None...

Microsoft JET Database Engine Remote Code Execution Vulnerability

A buffer overflow vulnerability exists in the Microsoft JET Database Engine that could allow remote code execution on an affected system. An attacker who successfully exploited this vulnerability could take control of an affected system. An attacker could then install programs; view, change, or...

Microsoft Windows XLS File Buffer Overflow Remote Code Execution Vulnerability

This vulnerability allows remote attackers to execute arbitrary code on vulnerable installations of Microsoft Windows. User interaction is required to exploit this vulnerability in that the target must visit a malicious page or open a malicious file. The specific flaw exists within the Microsoft...

Microsoft Windows XLS File Heap-based Buffer Overflow Remote Code Execution Vulnerability

This vulnerability allows remote attackers to execute arbitrary code on vulnerable installations of Microsoft Windows. User interaction is required to exploit this vulnerability in that the target must visit a malicious page or open a malicious file. The specific flaw exists within the Microsoft...

KLA11113 Multiple vulnerabilities in Microsoft Office

Multiple serious vulnerabilities have been found in Microsoft Office. Malicious users can exploit these vulnerabilities to execute arbitrary code, obtain sensitive information perform cross-site scripting and privilege escalations Below is a complete list of vulnerabilities: 1. Multiple...

CVE-2017-14971

Infocus Mondopad 2.2.08 is vulnerable to a Hashed Credential Disclosure vulnerability. The attacker provides a crafted Microsoft Office document containing a link that has a UNC pathname associated with an attacker-controller server. In one specific scenario, the attacker provides an Excel...

Design/Logic Flaw

Infocus Mondopad 2.2.08 is vulnerable to a Hashed Credential Disclosure vulnerability. The attacker provides a crafted Microsoft Office document containing a link that has a UNC pathname associated with an attacker-controller server. In one specific scenario, the attacker provides an Excel...

Memory corruption vulnerability in WPS Forms kso module (CNVD-2017-35756)

WPS Office is an office software suite developed independently by Kingsoft Corporation. A memory corruption vulnerability exists in the WPS Forms kso module, which occurs when Formset.exe in WPS is parsing a specific xlsx file. An attacker can exploit the vulnerability to cause a denial of servic...

Memory Corruption Vulnerability in WPS Forms

WPS Office is an office software suite developed independently by Kingsoft Corporation. A memory corruption vulnerability exists in Formset.exe in WPS when parsing a specific xls file. An attacker exploiting this vulnerability could cause a denial of service, which if exploited in a sophisticated...

Denial of Service Vulnerability in WPS Forms xlsxrw.DLL

WPS Office is an office software suite developed independently by Kingsoft Corporation. A denial of service vulnerability exists in WPS Forms xlsxrw.DLL, which occurs when Formset.exe in WPS is parsing a specific xls file. An attacker can exploit the vulnerability to cause a denial of service...

[SECURITY] Fedora 27 Update: freexl-1.0.4-1.fc27

FreeXL is a library to extract valid data from within an Excel spreadsheet .xls Design goals: simple and lightweight stable, robust and efficient easily and universally portable completely ignore any GUI-related oddity...

Microsoft Excel - OLE Arbitrary Code Execution

Microsoft Excel - OLE Arbitrary Code Execution Title: MS Office Excel all versions Arbitrary Code Execution Vulnerability Date: September 30th, 2017. Author: Eduardo Braun Prado Vendor Homepage: http://www.microsoft.com/ Software Link: https://products.office.com/ Version: 2007,2010,2013,2016 32/...

Microsoft Excel - OLE Arbitrary Code Execution

Title: MS Office Excel all versions Arbitrary Code Execution Vulnerability Date: September 30th, 2017. Author: Eduardo Braun Prado Vendor Homepage: http://www.microsoft.com/ Software Link: https://products.office.com/ Version: 2007,2010,2013,2016 32/64 bits x86 and x64 Tested on: Windows...

Bitwarden: Export vault feature is vulnerable to CSV injection

Hello guys I don't know if you care about this issue but it seems that the export feature in your https://vault.bitwarden.com//tools is vulnerable to CSV injection. If a CSV contains a malicious command it may have big impact Even though there is a popup notification for users before opening the...

Extreme Office 2017 suffers from a memory corruption vulnerability (CNVD-2017-31179)

Extreme Office is an independently controlled office learning software developed by Beijing Haiteng Times Technology Co. Extreme Forms 2017 can create, modify and edit xls, xlsx files. A memory corruption vulnerability exists in Extreme Forms in Extreme Office when handling special xls files, whi...

Extreme Office 2017 suffers from a memory corruption vulnerability (CNVD-2017-31171)

Extreme Office is an independently controlled office learning software developed by Beijing Haiteng Times Technology Co. Extreme Forms 2017 can create, modify and edit xls, xlsx files. A memory corruption vulnerability exists in Extreme Forms in Extreme Office when handling special xls files. An...

Ichitaro Office Excel File Code Execution Vulnerability(CVE-2017-2790)

Summary A vulnerability was discovered within the Ichitaro word processor. Ichitaro is published by JustSystems and is considered one of the more popular word processors used within Japan. Ichitaro handles Microsoft Excel's .xls file format. When processing a record type of 0x3c from a Workbook...

Memory Corruption Vulnerability in WPS Forms etmain Module

WPS Office is an office software suite developed independently by Kingsoft Corporation. A memory corruption vulnerability exists in the etmain module of the form et.exe in WPS when parsing a specific xls file, which can be exploited by an attacker to cause a denial of service...