Code execution vulnerabilities in Microsoft Office

Beschreibung

Multiple serious vulnerabilities have been found in Microsoft Office. Malicious users can exploit these vulnerabilities to execute arbitrary code.

Below is a complete list of vulnerabilities

1. An improper memory objects handling can be exploited remotely via a specially designed content;
2. An improper embedded fonts handling can be exploited remotely via a specially designed content.

---

Technical details

To mitigate vulnerability (2) user can prevent Office from opening RTF documents from unknown or untrusted sources or prevent Word from loading RTF documents. For further instructions take a look at original advisory listed below.

Ursprüngliche Informationshinweise

• CVE-2016-0183

• CVE-2016-0126
• CVE-2016-0140
• CVE-2016-0198

CVE Liste

• CVE-2016-0183
  high
• CVE-2016-0126
  high
• CVE-2016-0140
  high
• CVE-2016-0198
  high

KB Liste

• 3115124
• 3155777
• 3115121
• 2984938
• 3115123
• 3115132
• 3155776
• 2984943
• 3115025
• 3115016
• 3115094
• 3054984
• 3115103
• 3115115
• 3115116
• 3101520
• 3115117
• 3115464
• 3115479
• 3114893
• 3115480
• 3115465

Mehr erfahren

Informieren Sie sich über die Statistiken der in Ihrer Region verbreiteten Sicherheitslücken statistics.securelist.com