Multiple vulnerabilities in Microsoft Office

Beschreibung

Multiple serious vulnerabilities have been found in Microsoft Office. Malicious users can exploit these vulnerabilities to gain privileges, obtain sensitive information and execute arbitrary code.

Below is a complete list of vulnerabilities:

1. An improper font handling in the Office graphics component can be exploited remotely via specially crafted document or website to execute arbitrary code;
2. An unspecified vulnerability can be exploited remotely via specially crafted RTF document to obtain sensitive information;
3. Multiple vulnerabilities related to improper request handling in Microsoft SharePoint Server can be exploited remotely via specially crafted URL to gain privileges;
4. Multiple memory corruption vulnerabilities in Microsoft Excel can be exploited remotely via specially crafted file to execute arbitrary code;
5. Multiple memory corruption vulnerabilities in Microsoft Office can be exploited remotely via specially crafted file to execute arbitrary code;
6. An unspecified vulnerability can be exploited remotely via specially crafted document to obtain sensitive information.

Ursprüngliche Informationshinweise

• CVE-2018-1028

• CVE-2018-0950
• CVE-2018-1014
• CVE-2018-1034
• CVE-2018-1027
• CVE-2018-1029
• CVE-2018-1032
• CVE-2018-1030
• CVE-2018-1026
• CVE-2018-1005
• CVE-2018-1011
• CVE-2018-1007
• CVE-2018-0920

CVE Liste

• CVE-2018-1028
  high
• CVE-2018-0950
  high
• CVE-2018-1014
  high
• CVE-2018-1034
  high
• CVE-2018-1027
  high
• CVE-2018-1029
  high
• CVE-2018-1032
  high
• CVE-2018-1030
  high
• CVE-2018-1026
  high
• CVE-2018-1005
  high
• CVE-2018-1011
  high
• CVE-2018-1007
  high
• CVE-2018-0920
  high

KB Liste

• 4018355
• 4018311
• 4018357
• 4018344
• 4018341
• 4018350
• 4018354
• 4018360
• 4018362
• 4018319
• 4011628
• 4018342
• 4011586
• 4011717
• 4018337
• 4011719
• 4018339
• 4018328
• 4018356
• 4011712
• 4018359
• 4018347
• 4018353
• 4018343
• 4018336
• 4018288
• 4018330

Mehr erfahren

Informieren Sie sich über die Statistiken der in Ihrer Region verbreiteten Sicherheitslücken statistics.securelist.com