Microsoft Office 内存损坏漏洞(CVE-2015-1641)

来源： http://drops.wooyun.org/papers/9809 Microsoft Office 内存损坏漏洞 0x01 漏洞概述 今年4月份微软修补了一个名为CVE-2015-1641的word类型混淆漏洞，攻击者可以构造嵌入了docx的rtf文档进行攻击。word在解析docx文档处理displacedByCustomXML属性时未对customXML对象进行验证，可以传入其他标签对象进行处理，造成类型混淆，导致任意内存写入，最终经过精心构造的标签以及对应的属性值可以造成远程任意代码执行。 根据微软官方MS15-33安全公告里显示，这个漏洞覆盖Office 2007...

Microsoft Excel SharePoint Code Execution

The vulnerability of Microsoft Excel spreadsheet editors and the Microsoft SharePoint Server corporate application suite stems from buffer overflow attacks. Exploiting this vulnerability allows a malicious actor to execute arbitrary code through a specially created Office document, while operatin...

Microsoft SharePoint Server Office Compatibility Pack Excel Viewer XSS

The vulnerability of the Microsoft SharePoint Server corporate application package, the Microsoft Office Compatibility Pack package, the Excel Viewer programs for viewing Xls and Xlsx files, and the Microsoft Excel spreadsheet editor are caused by buffer overflows. Exploitation of this...

Microsoft Office Suite Code Execution

The vulnerability of the Microsoft Office suite and the Microsoft SharePoint Server corporate application suite is due to buffer overflow. Exploiting this vulnerability allows a malicious actor to execute arbitrary code using a specially created Office document from a remote location...

Memory corruption

Microsoft Excel 2010 SP2, Excel 2013 SP1, Excel 2013 RT SP1, Excel 2016, Excel for Mac 2011, Excel 2016 for Mac, and Excel Services on SharePoint Server 2013 SP1 allow remote attackers to execute arbitrary code via a crafted Office document, aka "Microsoft Office Memory Corruption Vulnerability."...

Memory corruption

Microsoft Excel 2007 SP3, Excel 2010 SP2, Excel 2013 SP1, Excel 2013 RT SP1, Excel 2016, Excel for Mac 2011, Excel 2016 for Mac, Office Compatibility Pack SP3, Excel Viewer, and Excel Services on SharePoint Server 2007 SP3, 2010 SP2, and 2013 SP1 allow remote attackers to execute arbitrary code v...

CVE-2015-6038

Microsoft Excel 2007 SP3, Excel 2010 SP2, Excel 2013 SP1, Excel 2013 RT SP1, Excel 2016, Excel for Mac 2011, Excel 2016 for Mac, Office Compatibility Pack SP3, Excel Viewer, and Excel Services on SharePoint Server 2007 SP3, 2010 SP2, and 2013 SP1 allow remote attackers to execute arbitrary code v...

CVE-2015-6038: Improper Restriction of Operations within the Bounds of a Memory Buffer

Microsoft Excel 2007 SP3, Excel 2010 SP2, Excel 2013 SP1, Excel 2013 RT SP1, Excel 2016, Excel for Mac 2011, Excel 2016 for Mac, Office Compatibility Pack SP3, Excel Viewer, and Excel Services on SharePoint Server 2007 SP3, 2010 SP2, and 2013 SP1 allow remote attackers to execute arbitrary code v...

Microsoft SharePoint Server Excel Services Multiple Vulnerabilities (3104540)

This host is missing an important security update according to Microsoft Bulletin MS15-116. SPDX-FileCopyrightText: 2015 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only CPE...

Microsoft Office CVE-2015-6094 Memory Corruption Vulnerability

Description Microsoft Office is prone to a remote memory-corruption vulnerability because it fails to properly handle objects in memory. An attacker can leverage this issue to execute arbitrary code in the context of the currently logged-in user. Failed exploit attempts will likely result in...

PT-2015-2687

Name of the Vulnerable Software and Affected Versions Microsoft Excel versions 2010 SP2 through 2016 Excel for Mac versions 2011 through 2016 Excel Services on SharePoint Server version 2013 SP1 Description The issue is caused by a buffer overflow in Microsoft Excel and SharePoint Server, allowin...

PT-2015-2716

Name of the Vulnerable Software and Affected Versions Microsoft Excel versions 2007 SP3 through 2016 Excel for Mac versions 2011 through 2016 Office Compatibility Pack version SP3 Excel Viewer Excel Services on SharePoint Server versions 2007 SP3 through 2013 SP1 Description The issue allows remo...

PT-2015-2688

Name of the Vulnerable Software and Affected Versions Microsoft Office versions 2007 SP3 through 2016 Word Automation Services on SharePoint Server versions 2010 SP2 through 2013 SP1 Office Web Apps versions 2010 SP2 through 2013 SP1 SharePoint Server versions 2010 SP2 through 2013 SP1 Descriptio...

Microsoft SharePoint Server Microsoft Excel Spreadsheet Editor Code Execution

The vulnerability of the Microsoft SharePoint Server and Microsoft Excel spreadsheet editors relates to the use of memory after it is released. Exploiting this vulnerability could allow a malicious actor to execute arbitrary code remotely, using a specially crafted calculatedColumnFormula object...

Microsoft SharePoint Server File Disclosure

The vulnerability of the InfoPath Forms Services component of the Microsoft SharePoint Server corporate application suite is related to deficiencies in access control mechanisms. Exploiting this vulnerability could allow an attacker, operating remotely, to read arbitrary files using a specially...

Microsoft Excel editors Code Execution

The vulnerability of Microsoft Excel editors, the Xls and Xlsx file viewers, Microsoft SharePoint Server, and the Microsoft Office Compatibility Pack are related to the use of memory after it is released. Exploiting this vulnerability can allow an attacker to execute arbitrary code remotely by...

Microsoft SharePoint Server Web Injection

The vulnerability of the Microsoft SharePoint Server corporate application and the Microsoft SharePoint Foundation software exists due to the lack of measures taken to protect the website structure. Exploiting this vulnerability allows a malicious actor to inject arbitrary web or HTML code throug...

Microsoft SharePoint Server Web Injection

The vulnerability of the Microsoft SharePoint Server corporate application and the Microsoft SharePoint Foundation software exists due to the lack of measures taken to protect the website structure. Exploiting this vulnerability allows a malicious actor to inject arbitrary web or HTML code remote...

Multiple K2 Products SQL Injection Vulnerabilities

K2 blackpearl, smartforms, and K2 for SharePoint are all products from K2 Corporation. blackpearl is a suite of applications for building and running business processes. smartforms is an online business system push messaging product. k2 for SharePoint is a suite of applications for creating forms...

CVE-2015-7299

SQL injection vulnerability in Runtime/Runtime/AjaxCall.ashx in K2 blackpearl, smartforms, and K2 for SharePoint 4.6.7 allows remote attackers to execute arbitrary SQL commands via the xml parameter...