MS15-070: Vulnerabilities in Microsoft Office Could Allow Remote Code Execution (3072620)

The remote Windows host has a version of Microsoft Office, Microsoft Word, Microsoft Excel, Microsoft PowerPoint, SharePoint Server, or Microsoft Office Compatibility Pack installed that is affected by multiple vulnerabilities : - An ASLR bypass vulnerability exists in Microsoft Excel due to memo...

Design/Logic Flaw

Microsoft SharePoint Server 2007 SP3, SharePoint Foundation 2010 SP2, SharePoint Server 2010 SP2, and SharePoint Foundation 2013 SP1 allow remote authenticated users to execute arbitrary code via crafted page content, aka "Microsoft SharePoint Page Content Vulnerabilities."...

Memory corruption

Microsoft Office 2010 SP2, Excel 2010 SP2, PowerPoint 2010 SP2, Word 2010 SP2, Office 2013 SP1, Excel 2013 SP1, PowerPoint 2013 SP1, Word 2013 SP1, Office 2013 RT SP1, Excel 2013 RT SP1, PowerPoint 2013 RT SP1, Word 2013 RT SP1, Office for Mac 2011, Excel for Mac 2011, PowerPoint for Mac 2011, Wo...

CVE-2015-1682

Microsoft Office 2010 SP2, Excel 2010 SP2, PowerPoint 2010 SP2, Word 2010 SP2, Office 2013 SP1, Excel 2013 SP1, PowerPoint 2013 SP1, Word 2013 SP1, Office 2013 RT SP1, Excel 2013 RT SP1, PowerPoint 2013 RT SP1, Word 2013 RT SP1, Office for Mac 2011, Excel for Mac 2011, PowerPoint for Mac 2011, Wo...

CVE-2015-1682

Microsoft Office Multiple Remote Code Execution Vulnerabilities (CVE-2015-1682) affect Office/SharePoint components across Office 2010 SP2, Office 2013 SP1, Office for Mac 2011, Word/Excel/PowerPoint/SharePoint-related services, etc. Root cause: memory corruption triggered by processing a crafted...

CVE-2015-1700

CVE-2015-1700 affects Microsoft SharePoint: SharePoint Server 2007 SP3, SharePoint Foundation 2010 SP2, SharePoint Server 2010 SP2, and SharePoint Foundation 2013 SP1 are vulnerable to remote code execution via specially crafted page content. Root cause is improper sanitization of page content, a...

MS15-046: Vulnerabilities in Microsoft Office Could Allow Remote Code Execution (3057181)

The remote Windows host has a version of Microsoft Office, Microsoft Word, Microsoft Excel, Microsoft PowerPoint, SharePoint Server, SharePoint Foundation Server, or Microsoft Office Web Apps installed that is affected by multiple remote code execution vulnerabilities due to improper handling of...

Microsoft SharePoint Server WAS Remote Code Execution Vulnerability (3057181)

This host is missing an important security update according to Microsoft Bulletin MS15-046. SPDX-FileCopyrightText: 2015 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only CPE...

Microsoft SharePoint Server RCE Vulnerability (3057181)

This host is missing an important security update according to Microsoft Bulletin MS15-046. SPDX-FileCopyrightText: 2015 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only CPE...

Microsoft SharePoint Server Excel Services RCE Vulnerability (3057181)

This host is missing an important security update according to Microsoft Bulletin MS15-046. SPDX-FileCopyrightText: 2015 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only CPE...

Microsoft SharePoint CVE-2015-1700 Multiple Remote Code Execution Vulnerabilities

Description Microsoft SharePoint is prone to multiple remote code-execution vulnerabilities. An attacker can leverage these issues to execute arbitrary code in the context of the W3WP service account user. Technologies Affected Microsoft SharePoint Foundation 2010 SP2 Microsoft SharePoint...

MS15-047: Description of the security update for SharePoint Server 2013: May 12, 2015

Resolves vulnerabilities in Microsoft Office server and productivity software that could allow remote code execution if an authenticated attacker sends specially crafted page content to a SharePoint server.SummaryThis security update resolves vulnerabilities in Microsoft Office server and...

Microsoft Office CVE-2015-1682 Memory Corruption Vulnerability

Description Microsoft Office is prone to a remote memory-corruption vulnerability. An attacker can leverage this issue to execute arbitrary code in the context of the currently logged-in user. Failed exploit attempts will likely result in denial-of-service conditions. Technologies Affected...

MS15-047: Vulnerabilities in SharePoint Server could allow remote code execution: May 12, 2015

Resolves vulnerabilities in Microsoft Office server and productivity software that could allow remote code execution if authenticated attacker sends specially crafted page content to a SharePoint server.SummaryThis security update resolves vulnerabilities in Microsoft Office server and productivi...

KLA10582 Code execution vulnerability in Microsoft Sharepoint Server

An unspecified vulnerability was found in Microsoft SharePoint Server. By exploiting this vulnerability malicious users can execute arbitrary code. This vulnerability can be exploited remotely via a specially designed page content. Original advisories Microsoft bulletin CVE-2015-1700 Related...

MS15-047: Vulnerabilities in Microsoft SharePoint Server Could Allow Remote Code Execution (3058083)

The remote Windows host has a version of Microsoft SharePoint Server that is affected by a remote code execution vulnerability due to not properly sanitizing specially crafted page content. An authenticated, remote attacker, by sending a malicious page to a SharePoint server, can exploit this to...

KLA10583 Code execution vulnerability in Microsoft Office

An unspecified vulnerability was found in Microsoft products. By exploiting this vulnerability malicious users can execute arbitrary code. This vulnerability can be exploited remotely via a specially designed document. Original advisories Microsoft bulletin CVE-2015-1683 CVE-2015-1682 Related...

Microsoft patch day 2015-4-14: the repair of many high-risk IE, Windows, Office vulnerabilities-vulnerability warning-the black bar safety net

Monthly the second Tuesday, Microsoft fixed the patch to fix the day, Microsoft on Tuesday（2015-4-14 the“patch day”on repairing a large number of vulnerabilities, which includes many IE, Windows, Office, high-risk vulnerabilities. Update announcement MS15-0 3 4 announcement MS15-0 3 4 announcemen...

Microsoft SharePoint Server Cross-Site Scripting Vulnerability (CNVD-2015-02484)

Microsoft SharePoint Server is an integrated suite of server capabilities that provides comprehensive content management and enterprise search, accelerates shared business processes and simplifies information sharing across boundaries. A cross-site scripting vulnerability exists in Microsoft...

Microsoft SharePoint Server WAS Multiple Vulnerabilities (3048019)

This host is missing a critical security update according to Microsoft Bulletin MS15-033. SPDX-FileCopyrightText: 2015 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only CPE =...