Multiple vulnerabilities in Microsoft Office

Description

Multiple serious vulnerabilities have been found in Microsoft Office. Malicious users can exploit these vulnerabilities to obtain sensitive information or execute arbitrary code.

Below is a complete list of vulnerabilities

1. An improper memory contents handling at OneNote can be exploited remotely via a specially designed OneNote files to obtain sensitive information;
2. An improper memory objects handling can be exploited remotely via a specially designed content to execute arbitrary code.

Original advisories

• ADV160011

• CVE-2016-3304
• CVE-2016-3303
• CVE-2016-3301
• CVE-2016-3318
• CVE-2016-3317
• CVE-2016-3316
• CVE-2016-3315
• CVE-2016-3313

Exploitation

Public exploits exist for this vulnerability.

Malware exists for this vulnerability. Usually such malware is classified as Exploit. More details.

Related products

• Microsoft-Office
• Microsoft-Outlook

CVE list

• CVE-2016-3304
  critical
• CVE-2016-3303
  critical
• CVE-2016-3301
  critical
• CVE-2016-3318
  critical
• CVE-2016-3317
  critical
• CVE-2016-3316
  critical
• CVE-2016-3315
  warning
• CVE-2016-3313
  critical

KB list

• 3115479
• 3114893
• 3115480
• 3115465
• 3115439
• 3115415
• 3114981
• 3114456
• 3115474
• 3115419
• 3115471
• 3115452
• 3114885
• 3115427
• 3114400
• 3114340
• 3115449
• 3179163
• 3115468
• 3115440
• 3115256
• 3114442
• 3114869
• 3179162
• 3115408
• 3115481
• 3174305
• 3115131
• 3174304
• 3174301
• 3115109
• 3115431
• 3174302

Read more

Find out the statistics of the vulnerabilities spreading in your region on statistics.securelist.com