Code execution vulnerabilities in Microsoft Office

Beschreibung

Multiple serious vulnerabilities have been found in Microsoft Office. Malicious users can exploit these vulnerabilities to execute arbitrary code.

Below is a complete list of vulnerabilities:

1. Improper memory handling can be exploited remotely via a specially designed content to execute arbitrary code;
2. Improper emails parsing can be exploited remotely via a specially designed email message to execute arbitrary code.

---

Technical details

Vulnerability (2) can be triggered on stations with Outlook installed. To mitigate this vulnerability you can disable messages preview and disable HTML display in Outlook.

Ursprüngliche Informationshinweise

• CVE-2015-6122

• CVE-2015-6118
• CVE-2015-6177
• CVE-2015-6124
• CVE-2015-6172
• CVE-2015-6040

CVE Liste

• CVE-2015-6122
  high
• CVE-2015-6118
  high
• CVE-2015-6177
  high
• CVE-2015-6124
  high
• CVE-2015-6172
  high
• CVE-2015-6040
  high

KB Liste

• 3085549
• 3114422
• 3114479
• 3114431
• 3114425
• 3114433
• 3114382
• 3114415
• 3114342
• 3114403
• 3119518
• 3085528
• 3116111
• 3114457
• 3101532
• 3114458
• 3119517

Mehr erfahren

Informieren Sie sich über die Statistiken der in Ihrer Region verbreiteten Sicherheitslücken statistics.securelist.com