Page 21 of 343 results (0.022 seconds)

CVSS: 9.3EPSS: 55%CPEs: 4EXPL: 0

CVE-2015-1642 – Microsoft Office Memory Corruption Vulnerability

https://notcve.org/view.php?id=CVE-2015-1642

15 Aug 2015 — Microsoft Office 2007 SP3, 2010 SP2, and 2013 SP1 allows remote attackers to execute arbitrary code via a crafted document, aka "Microsoft Office Memory Corruption Vulnerability." Vulnerabilidad en Microsoft Office 2007 SP3, 2010 SP2 y 2013 SP1, permite a atacantes remotos ejecutar código arbitrario a través de un documento manipulado, también conocido como 'Microsoft Office Memory Corruption Vulnerability.' Microsoft Office contains a memory corruption vulnerability that allows remote attackers to execute ... • http://www.securitytracker.com/id/1033239 • CWE-119: Improper Restriction of Operations within the Bounds of a Memory Buffer CWE-787: Out-of-bounds Write •

CVSS: 9.3EPSS: 38%CPEs: 3EXPL: 0

CVE-2015-2466

https://notcve.org/view.php?id=CVE-2015-2466

15 Aug 2015 — Microsoft Office 2007 SP3, 2010 SP2, 2013 SP1, and 2013 RT SP1 allows remote attackers to execute arbitrary code via a crafted template, aka "Microsoft Office Remote Code Execution Vulnerability." Vulnerabilidad en Microsoft Office 2007 SP3, 2010 SP2, 2013 SP1 y 2013 RT SP1, permite a atacantes remotos ejecutar código arbitrario a través de una plantilla manipulada, también conocida como 'Microsoft Office Remote Code Execution Vulnerability.' • http://www.securitytracker.com/id/1033239 • CWE-20: Improper Input Validation •

CVSS: 9.3EPSS: 58%CPEs: 13EXPL: 1

CVE-2015-2468 – Microsoft Office 2007 - 'mso.dll' Arbitrary Free (MS15-081)

https://notcve.org/view.php?id=CVE-2015-2468

15 Aug 2015 — Microsoft Word 2007 SP3, Office 2010 SP2, Word 2010 SP2, Word 2013 SP1, Word 2013 RT SP1, Office for Mac 2011, Office for Mac 2016, Office Compatibility Pack SP3, Word Viewer, Word Automation Services on SharePoint Server 2010 SP2 and 2013 SP1, Word Web Apps 2010 SP2, and Office Web Apps Server 2013 SP1 allow remote attackers to execute arbitrary code via a crafted document, aka "Microsoft Office Memory Corruption Vulnerability." Vulnerabilidad en Microsoft Word 2007 SP3, Office 2010 SP2, Word 2010 SP2, Wor... • https://www.exploit-db.com/exploits/37912 • CWE-119: Improper Restriction of Operations within the Bounds of a Memory Buffer •

CVSS: 9.3EPSS: 60%CPEs: 6EXPL: 1

CVE-2015-2470 – Microsoft Office 2007 - MSPTLS Heap Index Integer Underflow (MS15-081)

https://notcve.org/view.php?id=CVE-2015-2470

15 Aug 2015 — Integer underflow in Microsoft Office 2007 SP3, Office 2010 SP2, Office 2013 SP1, Office 2013 RT SP1, Office for Mac 2011, and Word Viewer allows remote attackers to execute arbitrary code via a crafted document, aka "Microsoft Office Integer Underflow Vulnerability." Vulnerabilidad de desbordamiento inferior de entero en Microsoft Office 2007 SP3, Office 2010 SP2, Office 2013 SP1, Office 2013 RT SP1, Office para Mac 2011 y Word Viewer, permite a atacantes remotos ejecutar código arbitrario a través de un d... • https://www.exploit-db.com/exploits/37924 • CWE-189: Numeric Errors •

CVSS: 9.3EPSS: 34%CPEs: 4EXPL: 0

CVE-2015-2477

https://notcve.org/view.php?id=CVE-2015-2477

15 Aug 2015 — Microsoft Office 2007 SP3, Office for Mac 2011, Office for Mac 2016, and Word Viewer allow remote attackers to execute arbitrary code via a crafted document, aka "Microsoft Office Memory Corruption Vulnerability." Vulnerabilidad en Microsoft Office 2007 SP3, Office para Mac 2011, Office para Mac 2016 y Word Viewer, permite a atacantes remotos ejecutar código arbitrario a través de un documento manipulado, también conocida como 'Vulnerabilidad de Corrupción de Memoria de Microsoft Office'. • http://www.securitytracker.com/id/1033239 • CWE-119: Improper Restriction of Operations within the Bounds of a Memory Buffer •

CVSS: 9.3EPSS: 32%CPEs: 4EXPL: 0

CVE-2015-1760

https://notcve.org/view.php?id=CVE-2015-1760

10 Jun 2015 — Microsoft Office Compatibility Pack SP3, Office 2010 SP2, Office 2013 SP1, and Office 2013 RT SP1 allow remote attackers to execute arbitrary code via a crafted Office document, aka "Microsoft Office Memory Corruption Vulnerability." Microsoft Office Compatibility Pack SP3, Office 2010 SP2, Office 2013 SP1, and Office 2013 RT SP1 permiten a atacantes remotos ejecutar código arbitrario a través de un documento Office manipulado, también conocido como 'vulnerabilidad de la corrupción de memoria de Microsoft O... • http://www.securityfocus.com/bid/75015 • CWE-19: Data Processing Errors •

CVSS: 9.3EPSS: 72%CPEs: 2EXPL: 0

CVE-2015-1770 – Microsoft Office Uninitialized Memory Use Vulnerability

https://notcve.org/view.php?id=CVE-2015-1770

10 Jun 2015 — Microsoft Office 2013 SP1 and 2013 RT SP1 allows remote attackers to execute arbitrary code via a crafted Office document, aka "Microsoft Office Uninitialized Memory Use Vulnerability." Microsoft Office 2013 SP1 y 2013 RT SP1 permite a atacantes remotos ejecutar código arbitrario a través de un documento Office manipulado, también conocido como 'vulnerabilidad del uso de memoria no inicializada de Microsoft Office.' Microsoft Office allows remote attackers to execute arbitrary code via a crafted Office docu... • http://www.securityfocus.com/bid/75016 • CWE-824: Access of Uninitialized Pointer •

CVSS: 9.3EPSS: 25%CPEs: 24EXPL: 0

CVE-2015-1682 – Microsoft Word ptCount Element Uninitialized Memory Read Remote Code Execution Vulnerability

https://notcve.org/view.php?id=CVE-2015-1682

12 May 2015 — Microsoft Office 2010 SP2, Excel 2010 SP2, PowerPoint 2010 SP2, Word 2010 SP2, Office 2013 SP1, Excel 2013 SP1, PowerPoint 2013 SP1, Word 2013 SP1, Office 2013 RT SP1, Excel 2013 RT SP1, PowerPoint 2013 RT SP1, Word 2013 RT SP1, Office for Mac 2011, Excel for Mac 2011, PowerPoint for Mac 2011, Word for Mac 2011, PowerPoint Viewer, Word Automation Services on SharePoint Server 2010 SP2 and 2013 SP1, Excel Services on SharePoint Server 2010 SP2 and 2013 SP1, Office Web Apps 2010 SP2, Excel Web App 2010 SP2, O... • http://www.securityfocus.com/bid/74481 • CWE-119: Improper Restriction of Operations within the Bounds of a Memory Buffer •

CVSS: 9.3EPSS: 34%CPEs: 29EXPL: 0

CVE-2015-0085 – Microsoft Word Format Tag Transposition Use-After-Free Remote Code Execution Vulnerability

https://notcve.org/view.php?id=CVE-2015-0085

11 Mar 2015 — Use-after-free vulnerability in Microsoft Office 2007 SP3, Excel 2007 SP3, PowerPoint 2007 SP3, Word 2007 SP3, Office 2010 SP2, Excel 2010 SP2, PowerPoint 2010 SP2, Word 2010 SP2, Office 2013 Gold and SP1, Word 2013 Gold and SP1, Office 2013 RT Gold and SP1, Word 2013 RT Gold and SP1, Excel Viewer, Office Compatibility Pack SP3, Word Automation Services on SharePoint Server 2010 SP2, Excel Services on SharePoint Server 2013 Gold and SP1, Word Automation Services on SharePoint Server 2013 Gold and SP1, Web A... • http://www.securitytracker.com/id/1031896 •

CVSS: 7.8EPSS: 37%CPEs: 5EXPL: 0

CVE-2014-6362

https://notcve.org/view.php?id=CVE-2014-6362

11 Feb 2015 — Use-after-free vulnerability in Microsoft Office 2007 SP3, 2010 SP2, and 2013 Gold and SP1 allows remote attackers to bypass the ASLR protection mechanism via a crafted document, aka "Microsoft Office Component Use After Free Vulnerability." Vulnerabilidad de uso después de liberación en Microsoft Office 2007 SP3, 2010 SP2, y 2013 Gold y SP1 permite a atacantes remotos evadir el mecanismo de protección ASLR a través de un documento manipulado, también conocido como 'vulnerabilidad de uso después de liberaci... • http://www.securityfocus.com/bid/72467 •