CVE-2016-0198: Improper Restriction of Operations within the Bounds of a Memory Buffer

Microsoft Word 2007 SP3, Office 2010 SP2, Word 2010 SP2, Word 2013 SP1, Word 2013 RT SP1, Word 2016, Word for Mac 2011, Word 2016 for Mac, Office Compatibility Pack SP3, and Word Viewer allow remote attackers to execute arbitrary code via a crafted Office document, aka "Microsoft Office Memory...

Microsoft Office Compatibility Pack Remote Code Execution Vulnerability (3155544)

This host is missing a critical security update according to Microsoft Bulletin MS16-054 SPDX-FileCopyrightText: 2016 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only...

MS16-054: Description of the security update for Office 2013: May 10, 2016

MS16-054: Description of the security update for Office 2013: May 10, 2016 Summary This security update resolves vulnerabilities in Microsoft Office that could allow remote code execution if a user opens a specially crafted Office file. To learn more about these vulnerabilities, see Microsoft...

MS16-054: Description of the security update for Office 2010: May 10, 2016

MS16-054: Description of the security update for Office 2010: May 10, 2016 Summary This security update resolves vulnerabilities in Microsoft Office that could allow remote code execution if a user opens a specially crafted Office file. To learn more about these vulnerabilities, see Microsoft...

MS16-054: Description of the security update for SharePoint Server 2010 Office Web Apps: May 10, 2016

MS16-054: Description of the security update for SharePoint Server 2010 Office Web Apps: May 10, 2016 Summary This security update resolves vulnerabilities in Microsoft Office that could allow remote code execution if a user opens a specially crafted Office file. To learn more about these...

MS16-054: Description of the security update for 2007 Microsoft Office Suite: May 10, 2016 (KB2984943)

MS16-054: Description of the security update for 2007 Microsoft Office Suite: May 10, 2016 KB2984943 Summary This security update resolves vulnerabilities in Microsoft Office that could allow remote code execution if a user opens a specially crafted Office file. To learn more about these...

PT-2016-1984

Name of the Vulnerable Software and Affected Versions Microsoft Office versions 2007 SP3 through 2016 Microsoft Word versions 2007 SP3 through 2016 Microsoft Word for Mac versions 2011 through 2016 Office Compatibility Pack version SP3 Word Viewer affected versions not specified Description The...

Microsoft Windows Kernel CVE-2016-0180 Local Privilege Escalation Vulnerability

Description Microsoft Windows is prone to a local privilege-escalation vulnerability. A local attacker can exploit this issue to gain elevated privileges. Technologies Affected Microsoft Windows 10 for 32-bit Systems Microsoft Windows 10 for x64-based Systems Microsoft Windows 10 version 1511 for...

Microsoft Windows Kernel 'Win32k.sys' CVE-2016-0196 Local Privilege Escalation Vulnerability

Description Microsoft Windows is prone to a local privilege-escalation vulnerability that occurs in the Windows kernel. A local attacker can exploit this issue to execute arbitrary code in kernel mode with elevated privileges. Technologies Affected Microsoft Windows 10 for 32-bit Systems Microsof...

Microsoft Office CVE-2016-0198 Memory Corruption Vulnerability

Description Microsoft Office is prone to a remote memory-corruption vulnerability because it fails to properly handle objects in memory. An attacker can leverage this issue to execute arbitrary code in the context of the currently logged-in user. Failed exploit attempts will likely result in deni...

TRN Threaded USENET News Reader 3.6-23 - Local Stack Based Overflow

Exploit for linux platform in category local exploits Exploit developed using Exploit Pack v5.4 Exploit Author: Juan Sacco - http://www.exploitpack.com - email protected Program affected: Threaded USENET news reader Version: 3.6-23 Tested and developed under: Kali Linux 2.0 x86 -...

TRN Threaded USENET News Reader 3.6-23 - Local Stack Overflow

TRN Threaded USENET News Reader 3.6-23 - Local Stack Overflow Exploit developed using Exploit Pack v5.4 Exploit Author: Juan Sacco - http://www.exploitpack.com - [email protected] Program affected: Threaded USENET news reader Version: 3.6-23 Tested and developed under: Kali Linux 2.0 x86 -...

TRN Threaded Reader 3.6-23 Stack Buffer Overflow

Exploit developed using Exploit Pack v5.4 Exploit Author: Juan Sacco - http://www.exploitpack.com - [email protected] Program affected: Threaded USENET news reader Version: 3.6-23 Tested and developed under: Kali Linux 2.0 x86 - https://www.kali.org Program description: Threaded USENET news...

TRN Threaded USENET News Reader 3.6-23 - Local Stack Overflow

Exploit developed using Exploit Pack v5.4 Exploit Author: Juan Sacco - http://www.exploitpack.com - [email protected] Program affected: Threaded USENET news reader Version: 3.6-23 Tested and developed under: Kali Linux 2.0 x86 - https://www.kali.org Program description: Threaded USENET news...

CVE-2016-0895

EMC RSA Data Loss Prevention 9.6 before SP2 P5 allows remote attackers to conduct clickjacking attacks via web-site elements with crafted transparency or opacity...

CVE-2016-0893

EMC RSA Data Loss Prevention 9.6 before SP2 P5 allows remote authenticated users to obtain sensitive information by reading error messages...

Immunity Canvas: STRUTS2_DMI_RCE

Name| struts2dmirce ---|--- CVE| CVE-2016-3081 Exploit Pack| CANVAS Description| struts2dmirce Notes| CVE Name: CVE-2016-3081 VENDOR: Apache NOTES: The JAR Server will listen on the port provided in the UI. However, if that port is unavailable, a random one will be chosen. Example vulnerable...

Microsoft Office Compatibility Pack Code Execution

The vulnerability of the Microsoft Office Compatibility Pack, the Microsoft Excel spreadsheet editor, and the Microsoft SharePoint Foundation email software, as well as the Microsoft SharePoint Designer HTML editor, is due to buffer overflow attacks. Exploitation of this vulnerability could allow...

Microsoft Office Compatibility Pack Code Execution

The vulnerability of the Microsoft Office Compatibility Pack, the Microsoft Excel Viewer for electronic spreadsheet viewing, the Microsoft Excel spreadsheet editor, and the Word For Mac text editor is due to buffer overflow. Exploiting this vulnerability allows a malicious actor to execute...

openSUSE SUSE Linux Enterprise Server Information Disclosure Vulnerability

openSUSE SUSE Linux Enterprise Server is an easy-to-install enterprise server version of the SUSE Linux operating system. An information disclosure vulnerability exists in openSUSE SUSE Linux Enterprise Server 11 SP 1, which allows local users to obtain sensitive information by reading files in a...