CVE-2017-8744

The connected advisory CPAI-2017-0786 identifies CVE-2017-8744 as a heap-based buffer overflow in the WordPerfect Document Converter component of Microsoft Office. The vulnerability stems from improper validation of document data prior to copying it to a heap-based buffer, enabling a remote attac...

Microsoft Office Web Apps 2013 Service Pack 1 Multiple Vulnerabilities (KB3213562)

This host is missing an important security update according to Microsoft KB3213562 SPDX-FileCopyrightText: 2017 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only CPE =...

Microsoft Excel 2016 Multiple Vulnerabilities (KB4011050)

This host is missing an important security update according to Microsoft KB4011050 SPDX-FileCopyrightText: 2017 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only ifdescriptio...

Microsoft Excel 2007 Service Pack 3 Remote Code Execution Vulnerability (KB4011062)

This host is missing an important security update according to Microsoft KB4011062 SPDX-FileCopyrightText: 2017 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only ifdescriptio...

Microsoft Excel 2010 Service Pack 2 Multiple Vulnerabilities (KB4011061)

This host is missing an important security update according to Microsoft KB4011061 SPDX-FileCopyrightText: 2017 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only ifdescriptio...

Microsoft Excel Viewer 2007 Service Pack 3 Remote Code Execution Vulnerability (KB4011065)

This host is missing an important security update according to Microsoft KB4011065 SPDX-FileCopyrightText: 2017 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only ifdescriptio...

Security Update for Microsoft Excel 2016 (KB4011050) 32-Bit Edition

A security vulnerability exists in Microsoft Excel 2016 32-Bit Edition that could allow arbitrary code to run when a maliciously modified file is opened. This update resolves that vulnerability...

Security Update for Microsoft Excel 2016 (KB4011050) 64-Bit Edition

A security vulnerability exists in Microsoft Excel 2016 64-Bit Edition that could allow arbitrary code to run when a maliciously modified file is opened. This update resolves that vulnerability...

FreeXL BIFF Dimension Marker Code Execution Vulnerability

Summary An exploitable heap-based buffer overflow vulnerability exists in the readlegacybiff function of FreeXL 1.0.3. A specially crafted XLS file can cause a memory corruption resulting in remote code execution. An attacker can send malicious XLS file to trigger this vulnerability. Tested...

The vulnerability of Microsoft Excel editors allows a hacker to inject arbitrary code.

The vulnerability of Microsoft Excel editors relates to the handling of objects in memory. Exploiting this vulnerability allows a malicious actor to inject arbitrary code remotely...

Microsoft Office Memory Corruption Vulnerability (CNVD-2017-15999)

Microsoft Excel is a spreadsheet processing software in the Office suite of the American Microsoft Microsoft company. A memory corruption vulnerability exists in Microsoft Excel, which results from the program failing to properly handle objects in memory. A remote attacker can exploit this...

Microsoft Excel Viewer 2007 Service Pack 3 Remote Code Execution Vulnerability (KB3191833)

This host is missing an important security update according to Microsoft KB3191833 SPDX-FileCopyrightText: 2017 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only ifdescriptio...

Microsoft Excel 2007 Service Pack 3 Remote Code Execution Vulnerability (KB3191894)

This host is missing an important security update according to Microsoft KB3191894 SPDX-FileCopyrightText: 2017 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only ifdescriptio...

Microsoft Excel 2010 Service Pack 2 Multiple Vulnerabilities (KB3191907)

This host is missing an important security update according to Microsoft KB3191907. SPDX-FileCopyrightText: 2017 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only ifdescripti...

Microsoft Excel 2013 Service Pack 1 Multiple Vulnerabilities (KB3213537)

This host is missing an important security update according to Microsoft KB3213537. SPDX-FileCopyrightText: 2017 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only ifdescripti...

Security Update for Microsoft Excel 2016 (KB3203477) 32-Bit Edition

A security vulnerability exists in Microsoft Excel 2016 32-Bit Edition that could allow arbitrary code to run when a maliciously modified file is opened. This update resolves that vulnerability...

KLA11069 Multiple vulnerabilities in Microsoft Office

Multiple serious vulnerabilities have been found in Microsoft Office. Malicious users can exploit these vulnerabilities to execute arbitrary code, gain privileges and spoof user interface. Below is a complete list of vulnerabilities: 1. Multiple vulnerabilities related to improper handling of...

CVE-2017-0194

Microsoft Excel 2007 SP3, Microsoft Excel 2010 SP2, and Office Compatibility Pack SP2 allow remote attackers to obtain sensitive information from process memory via a crafted Office document, aka "Microsoft Office Information Disclosure Vulnerability."...

Information disclosure

Microsoft Excel 2007 SP3, Microsoft Excel 2010 SP2, and Office Compatibility Pack SP2 allow remote attackers to obtain sensitive information from process memory via a crafted Office document, aka "Microsoft Office Information Disclosure Vulnerability."...

CVE-2017-0106

Microsoft Excel 2007 SP3, Microsoft Outlook 2010 SP2, Microsoft Outlook 2013 SP1, and Microsoft Outlook 2016 allow remote attackers to execute arbitrary code or cause a denial of service memory corruption via a crafted document, aka "Microsoft Office Memory Corruption Vulnerability."...