Microsoft Office 2016 Click-to-Run (C2R) Remote Code Execution Vulnerability (Mar 2018)

This host is missing an important security update according to Microsoft Office Click-to-Run updates. SPDX-FileCopyrightText: 2018 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier:...

DEWESoft X3 SP1 Arbitrary Code Execution Vulnerability

DEWESoft X3 SP1 is a device for industrial measurements. A security vulnerability exists in the RunExeFile.exe file in the DEWESoft X3 SP1 64-bit device, which originates when the program requires authentication for a session on TCP port 1999. A remote attacker could exploit the vulnerability to...

CVE-2018-7756

RunExeFile.exe in the installer for DEWESoft X3 SP1 64-bit devices does not require authentication for sessions on TCP port 1999, which allows remote attackers to execute arbitrary code or access internal commands, as demonstrated by a RUN command that launches a .EXE file located at an arbitrary...

DEBIAN-CVE-2017-12194

A flaw was found in the way spice-client processed certain messages sent from the server. An attacker, having control of malicious spice-server, could use this flaw to crash the client or execute arbitrary code with permissions of the user running the client. spice-gtk versions through 0.34 are...

CVE-2018-0903

Microsoft Access 2010 SP2, Microsoft Access 2013 SP1, Microsoft Access 2016, and Microsoft Office 2016 Click-to-Run allow a remote code execution vulnerability due to how objects are handled in memory, aka "Microsoft Access Remote Code Execution Vulnerability"...

DEBIAN-CVE-2017-18226

The Gentoo net-im/jabberd2 package through 2.6.1 sets the ownership of /var/run/jabber to the jabber account, which might allow local users to kill arbitrary processes by leveraging access to this account for PID file modification before a root script executes a "kill -TERM cat...

CVE-2017-18226

The Gentoo net-im/jabberd2 package through 2.6.1 sets the ownership of /var/run/jabber to the jabber account, which might allow local users to kill arbitrary processes by leveraging access to this account for PID file modification before a root script executes a "kill -TERM cat...

DEWESoft X3 SP1 (64-bit) installer / Remote Internal Command Access Vulnerability

Exploit for windows platform in category remote exploits + Credits: John Page aka hyp3rlinx Vendor: ============= www.dewesoft.com Product: =========== DEWESoft X3 SP1 64-bit installer - X3 DEWESoftFULLX3SP164BIT.exe Vulnerability Type: =================== Remote Internal Command Access CVE...

Underbit libmad Denial of Service Vulnerability

Underbit libmad is an open source MPEG audio decoding library that provides 24-bit PCM output for platforms without floating point support. A security vulnerability exists in the 'maddecoderrun' function of the decoder.c file in Underbit libmad 0.15.1b and earlier versions. A remote attacker can...

Microsoft Windows Elevation of Privilege Vulnerability (CNVD-2018-05575)

Microsoft Windows is a series of operating systems released by Microsoft Corporation in the U.S. AppContainer is one of the runtime environments. An elevation of privilege vulnerability exists in Microsoft Windows. A local attacker can exploit this vulnerability by logging on to the system and...

Cisco Data Center Analytics Framework Cross-Site Scripting Vulnerability

Cisco Data Center Analytics Framework DCAF is a set of data center analytics framework from Cisco. The Cisco Data Center Analytics Framework suffers from a cross-site scripting vulnerability that arises from the program's failure to adequately validate user-submitted input. A remote attacker coul...

CVE-2018-0851

Microsoft Office 2007 SP2, Microsoft Office Word Viewer, Microsoft Office 2010 SP2, Microsoft Office 2013 SP1 and RT SP1, Microsoft Office 2016, and Microsoft Office 2016 Click-to-Run C2R allow a remote code execution vulnerability, due to how Office handles objects in memory, aka "Microsoft Offi...

CVE-2018-0841

Microsoft Office 2016 Click-to-Run allows a remote code execution vulnerability due to how objects are handled in memory, aka "Office Remote Code Execution Vulnerability"...

CVE-2018-0841

Microsoft Office 2016 Click-to-Run allows a remote code execution vulnerability due to how objects are handled in memory, aka "Office Remote Code Execution Vulnerability"...

Remote code execution

Microsoft Office 2016 Click-to-Run allows a remote code execution vulnerability due to how objects are handled in memory, aka "Office Remote Code Execution Vulnerability"...

Information disclosure

Microsoft Office 2010 SP2, Microsoft Office 2013 SP1 and RT SP1, Microsoft Office 2016, and Microsoft Office 2016 Click-to-Run C2R allow an information disclosure vulnerability, due to how Office initializes the affected variable, aka "Microsoft Office Information Disclosure Vulnerability"...

CVE-2018-0850

CVE-2018-0850 affects Microsoft Outlook and Office components across Outlook 2007/2010/2013/2016 and Office 2016 Click-to-Run. The root cause is how the format of incoming messages is validated, enabling elevation of privileges when a victim processes a specially crafted email. Connected sources ...

CVE-2018-0841

CVE-2018-0841 is a remote code execution vulnerability in Microsoft Office 2016 Click-to-Run (C2R) stemming from how Office objects are handled in memory. The NVD entry (and corroborating sources) describe it as a network-exploitable issue with high impact (C/H/I/A all High) and a CVSSv3 base sco...

CVE-2018-0841

Microsoft Office 2016 Click-to-Run allows a remote code execution vulnerability due to how objects are handled in memory, aka "Office Remote Code Execution Vulnerability"...

CVE-2018-0851: Out-of-bounds Write

Microsoft Office 2007 SP2, Microsoft Office Word Viewer, Microsoft Office 2010 SP2, Microsoft Office 2013 SP1 and RT SP1, Microsoft Office 2016, and Microsoft Office 2016 Click-to-Run C2R allow a remote code execution vulnerability, due to how Office handles objects in memory, aka "Microsoft Offi...