Code execution vulnerabilities in Microsoft Office

Description

Multiple serious vulnerabilities have been found in Microsoft Office. Malicious users can exploit these vulnerabilities to execute arbitrary code.

Below is a complete list of vulnerabilities

1. An improper memory objects handling can be exploited remotely via a specially designed content;
2. An improper embedded fonts handling can be exploited remotely via a specially designed content.

---

Technical details

To mitigate vulnerability (2) user can prevent Office from opening RTF documents from unknown or untrusted sources or prevent Word from loading RTF documents. For further instructions take a look at original advisory listed below.

Original advisories

• CVE-2016-0183

• CVE-2016-0126
• CVE-2016-0140
• CVE-2016-0198

Related products

• Microsoft-Office

CVE list

• CVE-2016-0183
  critical
• CVE-2016-0126
  critical
• CVE-2016-0140
  critical
• CVE-2016-0198
  critical

KB list

• 3115124
• 3155777
• 3115121
• 2984938
• 3115123
• 3115132
• 3155776
• 2984943
• 3115025
• 3115016
• 3115094
• 3054984
• 3115103
• 3115115
• 3115116
• 3101520
• 3115117
• 3115464
• 3115479
• 3114893
• 3115480
• 3115465

Read more

Find out the statistics of the vulnerabilities spreading in your region on statistics.securelist.com