Multiple vulnerabilities in Microsoft Office

Beschreibung

Multiple serious vulnerabilities have been found in Microsoft Office. Malicious users can exploit these vulnerabilities to execute arbitrary code, obtain sensitive information, cause denial of service, gain priveleges.

Below is a complete list of vulnerabilities:

1. Memory corruption vulnerability can be exploited remotely via a specially designed document to cause a denial of service or execute arbitrary code;
2. Information disclosure vulnerability can be exploited remotely via a specialy designed document to cause a denial of service or obtain sensitive information (from process memory);
3. Mishandling of click upon a specially designed cell can be exploited remotely to execute arbitrary code;
4. Mishandling or a registry check can be exploited remotely via specially designed embedded content of a document to execute arbitrary code;
5. Misparsing of file formats can be exploited remotely via a specially designed document to execute arbitrary code;
6. Vulnerability in Uniscribe can be exploited remotely via a specially designed site to execute arbitrary code;
7. Mishandling of library loading can be exploited by malicious local users via a specially designed application to gain privileges.

Ursprüngliche Informationshinweise

• MS16-148

• CVE-2016-7257
• CVE-2016-7274
• CVE-2016-7277
• CVE-2016-7276
• CVE-2016-7275
• CVE-2016-7268
• CVE-2016-7267
• CVE-2016-7300
• CVE-2016-7291
• CVE-2016-7290
• CVE-2016-7289
• CVE-2016-7262
• CVE-2016-7263
• CVE-2016-7264
• CVE-2016-7265
• CVE-2016-7266

CVE Liste

• CVE-2016-7257
  critical
• CVE-2016-7274
  critical
• CVE-2016-7277
  critical
• CVE-2016-7276
  critical
• CVE-2016-7275
  critical
• CVE-2016-7268
  critical
• CVE-2016-7267
  critical
• CVE-2016-7300
  critical
• CVE-2016-7291
  critical
• CVE-2016-7290
  critical
• CVE-2016-7289
  critical
• CVE-2016-7262
  critical
• CVE-2016-7263
  critical
• CVE-2016-7264
  critical
• CVE-2016-7265
  critical
• CVE-2016-7266
  critical

KB Liste

• 3118380
• 2889841
• 3128008
• 3127986
• 2883033
• 3128022
• 3128023
• 3128026
• 3128035
• 3128032
• 3198800
• 3128024
• 3128043
• 3128044
• 3128016
• 3127995
• 3128019
• 3127892
• 3128020
• 3128029
• 3198808
• 3114395
• 3128037
• 3127968
• 3128025
• 3128034

Mehr erfahren

Informieren Sie sich über die Statistiken der in Ihrer Region verbreiteten Sicherheitslücken statistics.securelist.com