97 matches found
Beware! This Microsoft PowerPoint Hack Installs Malware Without Requiring Macros
"Disable macros and always be extra careful when you manually enable it while opening Microsoft Office Word documents." You might have heard of above-mentioned security warning multiple times on the Internet as hackers usually leverage this decade old macros-based hacking technique to hack...
CVE-2017-0204
Microsoft Outlook 2007 SP3, Microsoft Outlook 2010 SP2, Microsoft Outlook 2013 SP1, and Microsoft Outlook 2016 allow remote attackers to bypass the Office Protected View via a specially crafted document, aka "Microsoft Office Security Feature Bypass Vulnerability."...
CVE-2017-0204
CVE-2017-0204 affects Microsoft Outlook 2007 SP3, 2010 SP2, 2013 SP1, and 2016. The vulnerability is a security feature bypass where a specially crafted document bypasses Office Protected View by exploiting how Office handles file formats (security feature bypass). Impact described in connected d...
CVE-2017-0204: Undefined Security Weakness
Microsoft Outlook 2007 SP3, Microsoft Outlook 2010 SP2, Microsoft Outlook 2013 SP1, and Microsoft Outlook 2016 allow remote attackers to bypass the Office Protected View via a specially crafted document, aka "Microsoft Office Security Feature Bypass Vulnerability."...
Microsoft Office OLE2Link vulnerability (CVE-2017-0199)
Vulnerability details references: Office OLE2Link zero-day from NCCGroup） CVE-2017-0199: In the Wild Attacks Leveraging the HTA Handler From FireEye） HTAsThe Microsoft OLE2Link object contains a vulnerability in the way that it processes remotely-linked content. The remote content is opened based...
PT-2017-1869
Name of the Vulnerable Software and Affected Versions Microsoft Outlook versions 2007 SP3 through 2016 Description The issue is related to a security feature bypass in Microsoft Office software, specifically in Microsoft Outlook, where the software improperly handles the parsing of file formats...
Beware of an Unpatched Microsoft Word 0-Day Flaw being Exploited in the Wild
It's 2017, and opening a simple MS Word file could compromise your system. Security researchers are warning of a new in-the-wild attack that silently installs malware on fully-patched computers by exploiting a serious — and yet unpatched — zero-day vulnerability in all current versions of Microso...
Twin zero-day attacks: PROMETHIUM and NEODYMIUM target individuals in Europe
Targeted attacks are typically carried out against individuals to obtain intellectual property and other valuable data from target organizations. These individuals are either directly in possession of the targeted information or are able to connect to networks where the information resides...
MS16-088: Description of the security update for Excel 2010: July 12, 2016
MS16-088: Description of the security update for Excel 2010: July 12, 2016 Summary This security update resolves vulnerabilities in Microsoft Office that could allow remote code execution if a user opens a specially crafted Office file. To learn more about these vulnerabilities, see Microsoft...
March 8, 2016, update for Office 2016 (KB3114857)
None None...
March 8, 2016, update for Office 2016 (KB3114705)
None None...
Adobe Recommends Protected View as Temporary Zero Day Mitigation
Adobe released an advisory yesterday suggesting a manual mitigation for zero-day vulnerabilities in its Reader and Acrobat products that are being actively exploited in the wild. The exploit is the first sandbox escape in Adobe Reader X and above. FireEye, which reported the vulnerability to Adob...
Adobe Reader and Acrobat memory corruption vulnerabilities
Overview Adobe Reader and Acrobat 11.0.01 and earlier, 10.1.5 and earlier, and 9.5.3 and earlier contain memory corruption vulnerabilities. Description The Adobe security bulletin APSB13-07 states:Adobe has released security updates for Adobe Reader and Acrobat XI 11.0.01 and earlier for Windows...
Adobe Extends Security of Reader and Acrobat With Better Sandbox, Force ASLR
Adobe has upgraded the security capabilities of both Reader and Acrobat with new releases this week, extending the functionality of the sandbox and adding a feature that forces all of the DLLs loaded by the applications to use ASLR, regardless of whether they originally were compiled with ASLR...
Microsoft Struts Office 2010 'Sandbox' Security
From Computerworld Gregg Keizer Microsoft’s plan to “sandbox” documents in the next version of Office looks like a “very good step forward,” according to one security analyst. Last week, Microsoft revealed more details about a new security feature in Office 2010, dubbed “Protected View,” that is...