Multiple vulnerabilities in Microsoft Graphics Component

Описание

Multiple serious vulnerabilities have been found in a number of Microsoft products (full list below). Malicious users can exploit these vulnerabilities to execute arbitrary code or cause denial of service.

Below is a complete list of vulnerabilities

1. Vectors related to unknown vulnerabilities can be exploited to execute arbitrary code via specially designed EMF+ record in an image file.

2. Vectors related to Uniscribe can be exploited to execute arbitrary code or cause a denial of service via specially designed EMF+ record in a font file.

Первичный источник обнаружения

• MS bulletin
  CVE-2014-1818
  CVE-2014-1817
  

Связанные продукты

• Microsoft-Access
• Microsoft-Office-Live-Meeting-2007
• Microsoft-Lync
• Microsoft-Office-Access
• Microsoft-Office-PowerPoint
• Microsoft-Office-Visio-2007
• Microsoft-Office-Visio
• Microsoft-Office-Professional-Plus-2010
• Microsoft-Office
• Microsoft-Lync-2010-Attendee
• Microsoft-Outlook
• Microsoft-Excel
• Microsoft-Word
• Microsoft-Windows
• Microsoft-Windows-Server
• Microsoft-Windows-Vista-2
• Microsoft-Windows-Server-2003-Enterprise-Edition
• Microsoft-Windows-Server-2003-Standard-Edition
• Microsoft-Windows-Server-2003-Web-Edition

Список CVE

• CVE-2014-1818
  critical
• CVE-2014-1817
  critical

Список KB

• 2963282
• 2964736
• 2963284
• 2963285
• 2957509
• 2957503
• 2881069
• 2767915
• 2967487
• 2965161
• 2965155
• 2881013
• 2964718
• 2968966
• 2878233
• 2968967
• 2863942

Смотрите также

Узнай статистику распространения уязвимостей в своем регионе statistics.securelist.com