10113 matches found
PT-2017-1528
Name of the Vulnerable Software and Affected Versions Microsoft SharePoint Server affected versions not specified Description The issue arises from Microsoft SharePoint Server's failure to properly sanitize crafted web requests, allowing remote attackers to run cross-script in the local security...
PT-2017-1636
Name of the Vulnerable Software and Affected Versions Microsoft Office affected versions not specified Microsoft Office Web Apps affected versions not specified Microsoft Office Compatibility Pack affected versions not specified Microsoft Word affected versions not specified Microsoft SharePoint...
Microsoft Office CVE-2017-0006 Memory Corruption Vulnerability
Description Microsoft Office is prone to a remote memory-corruption vulnerability. An attacker can leverage this issue to execute arbitrary code in the context of the currently logged-in user. Failed exploit attempts will likely result in denial of service conditions. Technologies Affected...
Microsoft Office CVE-2017-0052 Memory Corruption Vulnerability
Description Microsoft Office is prone to a remote memory-corruption vulnerability. An attacker can leverage this issue to execute arbitrary code in the context of the currently logged-in user. Failed exploit attempts will likely result in denial of service conditions. Technologies Affected...
Microsoft SharePoint CVE-2017-0107 Cross Site Scripting Vulnerability
Description Microsoft SharePoint is prone to a cross-site scripting vulnerability because it fails to properly sanitize user-supplied input. An attacker may leverage this issue to execute arbitrary script code in the browser of an unsuspecting user in the context of the affected site. This may...
Microsoft Office CVE-2017-0105 Information Disclosure Vulnerability
Description Microsoft Office is prone to an information-disclosure vulnerability. Attackers can exploit this issue to obtain sensitive information that may aid in further attacks. Technologies Affected Microsoft Office 2010 32-bit edition SP2 Microsoft Office 2010 64-bit edition SP2 Microsoft...
Microsoft Office CVE-2017-0027 Information Disclosure Vulnerability
Description Microsoft Office is prone to an information-disclosure vulnerability. Attackers can exploit this issue to obtain sensitive information that may aid in further attacks. Technologies Affected Microsoft Excel 2007 SP3 Microsoft Excel 2010 Service Pack 2 32-bit editions Microsoft Excel 20...
Microsoft SharePoint Server Remote Code Execution Vulnerability (3214291)
This host is missing an important security update according to Microsoft Bulletin MS17-002 SPDX-FileCopyrightText: 2017 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only CPE ...
Security Update for Microsoft SharePoint Enterprise Server 2016 (KB3141486) farm-deployment
A security vulnerability exists in Microsoft SharePoint Enterprise Server 2016 that could allow arbitrary code to run when a maliciously modified file is opened. This update resolves that vulnerability...
Memory corruption
Microsoft Word 2016 and SharePoint Enterprise Server 2016 allow remote attackers to execute arbitrary code via a crafted document, aka "Microsoft Office Memory Corruption Vulnerability."...
CVE-2017-0003
Microsoft Word 2016 and SharePoint Enterprise Server 2016 allow remote attackers to execute arbitrary code via a crafted document, aka "Microsoft Office Memory Corruption Vulnerability."...
CVE-2017-0003
Microsoft Word 2016 and SharePoint Enterprise Server 2016 allow remote attackers to execute arbitrary code via a crafted document, aka "Microsoft Office Memory Corruption Vulnerability."...
CVE-2017-0003
CVE-2017-0003 affects Microsoft Word 2016 and SharePoint Enterprise Server 2016 (Office memory corruption vulnerability). The underlying issue is a memory handling flaw that can allow remote code execution when a specially crafted Office file is opened. In affected products, exploitation requires...
CVE-2017-0003
Microsoft Word 2016 and SharePoint Enterprise Server 2016 allow remote attackers to execute arbitrary code via a crafted document, aka "Microsoft Office Memory Corruption Vulnerability."...
MS17-002: Description of the security update for SharePoint Server 2016: January 10, 2017
None None...
PT-2017-10425
Name of the Vulnerable Software and Affected Versions Microsoft Word 2016 SharePoint Enterprise Server 2016 Description A remote code execution issue exists in Microsoft Office software due to its failure to properly handle objects in memory. This allows an attacker to run arbitrary code in the...
CVE-2017-0003: Improper Restriction of Operations within the Bounds of a Memory Buffer
Microsoft Word 2016 and SharePoint Enterprise Server 2016 allow remote attackers to execute arbitrary code via a crafted document, aka "Microsoft Office Memory Corruption Vulnerability."...
MS17-002: Security Update for Microsoft Office (3214291)
The version of Microsoft Word or Microsoft SharePoint Server installed on the remote Windows host is missing a security update. It is, therefore, affected by a memory corruption issue due to improper handling of objects in memory. An unauthenticated, remote attacker can exploit this, by convincin...
Microsoft Office CVE-2017-0003 Memory Corruption Vulnerability
Description Microsoft Office is prone to a remote memory-corruption vulnerability. An attacker can leverage this issue to execute arbitrary code in the context of the currently logged-in user. Failed exploit attempts will likely result in denial of service conditions. Technologies Affected...
KLA10939 Arbitrary code execution vulnerability in Microsoft Office Word 2016 and Microsoft SharePoint Enterprise Server 2016
Memory corruption vulnerability was found in Microsoft Word 2016 and Microsoft SharePoint Enterprise Server 2016. By exploiting this vulnerability malicious users can execute arbitrary code. This vulnerability can be exploited remotely via a specially designed document. Original advisories MS17-0...