CVE-2015-6122

CVE-2015-6122 is part of the MS15-131 memory corruption family affecting multiple Microsoft Office products. The connected Nessus plugin (MS15-131) links CVE-2015-6122 to remote code execution via crafted Office documents, with Mac OS X Office versions (MACOSX_MS15-131_OFFICE.NASL) and Office for...

CVE-2015-6177: Improper Restriction of Operations within the Bounds of a Memory Buffer

Microsoft Excel 2007 SP3, Office Compatibility Pack SP3, and Excel Viewer allow remote attackers to execute arbitrary code via a crafted Office document, aka "Microsoft Office Memory Corruption Vulnerability."...

CVE-2015-6122: Improper Restriction of Operations within the Bounds of a Memory Buffer

Microsoft Excel 2007 SP3, Excel 2010 SP2, Excel for Mac 2011, Office Compatibility Pack SP3, and Excel Viewer allow remote attackers to execute arbitrary code via a crafted Office document, aka "Microsoft Office Memory Corruption Vulnerability."...

CVE-2015-6040: Improper Restriction of Operations within the Bounds of a Memory Buffer

Microsoft Excel 2007 SP3, Excel 2010 SP2, Excel for Mac 2011, Excel 2016 for Mac, Office Compatibility Pack SP3, and Excel Viewer allow remote attackers to execute arbitrary code via a crafted Office document, aka "Microsoft Office Memory Corruption Vulnerability."...

PT-2015-2984

Name of the Vulnerable Software and Affected Versions Microsoft Excel versions 2007 SP3 through 2010 SP2 Excel for Mac versions 2011 through 2016 Office Compatibility Pack version SP3 Excel Viewer affected versions not specified Description The issue allows remote attackers to execute arbitrary...

PT-2015-2988

Name of the Vulnerable Software and Affected Versions Microsoft Excel versions 2007 SP3 through 2010 SP2 Microsoft Excel for Mac version 2011 Microsoft Office Compatibility Pack version SP3 Microsoft Excel Viewer Description The issue is caused by a buffer overflow and allows a remote attacker to...

PT-2015-3022

Name of the Vulnerable Software and Affected Versions Microsoft Excel versions 2007 SP3 Office Compatibility Pack version SP3 Excel Viewer affected versions not specified Description The issue allows remote attackers to execute arbitrary code via a crafted Office document. This is due to the Offi...

Microsoft Excel SharePoint Code Execution

The vulnerability of Microsoft Excel spreadsheet editors and the Microsoft SharePoint Server corporate application suite stems from buffer overflow attacks. Exploiting this vulnerability allows a malicious actor to execute arbitrary code through a specially created Office document, while operatin...

Microsoft Excel for Mac跨站脚本漏洞

No description provided by source...

[SECURITY] [DSA 3208-2] freexl regression update

------------------------------------------------------------------------- Debian Security Advisory DSA-3208-2 [email protected] https://www.debian.org/security/ Salvatore Bonaccorso November 14, 2015 https://www.debian.org/security/faq -...

[SECURITY] [DSA 3208-2] freexl regression update

------------------------------------------------------------------------- Debian Security Advisory DSA-3208-2 [email protected] https://www.debian.org/security/ Salvatore Bonaccorso November 14, 2015 https://www.debian.org/security/faq -...

CVE-2015-6123

Cross-site scripting XSS vulnerability in Microsoft Excel for Mac 2011 and Excel 2016 for Mac allows remote attackers to inject arbitrary web script or HTML via a crafted e-mail message that is mishandled by Outlook for Mac, aka "Microsoft Outlook for Mac Spoofing Vulnerability."...

Memory corruption

Microsoft Excel 2007 SP3, Excel 2010 SP2, Excel 2013 SP1, Excel 2013 RT SP1, Excel 2016, Excel for Mac 2011, Excel 2016 for Mac, Office Compatibility Pack SP3, Excel Viewer, and Excel Services on SharePoint Server 2007 SP3, 2010 SP2, and 2013 SP1 allow remote attackers to execute arbitrary code v...

CVE-2015-6123

CVE-2015-6123 is an XSS vulnerability affecting Microsoft Excel 2011 for Mac and Excel 2016 for Mac. The issue arises from a crafted Outlook for Mac email mishandling HTML, enabling remote attackers to inject arbitrary script/HTML. Connected sources reference MS15-116 Office for Mac updates as th...

CVE-2015-6123

Cross-site scripting XSS vulnerability in Microsoft Excel for Mac 2011 and Excel 2016 for Mac allows remote attackers to inject arbitrary web script or HTML via a crafted e-mail message that is mishandled by Outlook for Mac, aka "Microsoft Outlook for Mac Spoofing Vulnerability."...

CVE-2015-6038

Microsoft Excel 2007 SP3, Excel 2010 SP2, Excel 2013 SP1, Excel 2013 RT SP1, Excel 2016, Excel for Mac 2011, Excel 2016 for Mac, Office Compatibility Pack SP3, Excel Viewer, and Excel Services on SharePoint Server 2007 SP3, 2010 SP2, and 2013 SP1 allow remote attackers to execute arbitrary code v...

CVE-2015-6123: Improper Neutralization of Input During Web Page Generation

Cross-site scripting XSS vulnerability in Microsoft Excel for Mac 2011 and Excel 2016 for Mac allows remote attackers to inject arbitrary web script or HTML via a crafted e-mail message that is mishandled by Outlook for Mac, aka "Microsoft Outlook for Mac Spoofing Vulnerability."...

CVE-2015-6094: Improper Restriction of Operations within the Bounds of a Memory Buffer

Microsoft Excel 2010 SP2, Excel 2013 SP1, Excel 2013 RT SP1, Excel 2016, Excel for Mac 2011, Excel 2016 for Mac, and Excel Services on SharePoint Server 2013 SP1 allow remote attackers to execute arbitrary code via a crafted Office document, aka "Microsoft Office Memory Corruption Vulnerability."...

CVE-2015-6038: Improper Restriction of Operations within the Bounds of a Memory Buffer

Microsoft Excel 2007 SP3, Excel 2010 SP2, Excel 2013 SP1, Excel 2013 RT SP1, Excel 2016, Excel for Mac 2011, Excel 2016 for Mac, Office Compatibility Pack SP3, Excel Viewer, and Excel Services on SharePoint Server 2007 SP3, 2010 SP2, and 2013 SP1 allow remote attackers to execute arbitrary code v...

PT-2015-3197

Name of the Vulnerable Software and Affected Versions Microsoft Excel for Mac versions 2011 through 2016 Description The issue is related to a cross-site scripting XSS vulnerability that allows remote attackers to inject arbitrary web script or HTML via a crafted e-mail message. This is possible...