Code execution vulnerabilities in Microsoft Office

Описание

Multiple serious vulnerabilities have been found in Microsoft Office. Malicious users can exploit these vulnerabilities to execute arbitrary code.

Below is a complete list of vulnerabilities:

1. Improper memory handling can be exploited remotely via a specially designed content to execute arbitrary code;
2. Improper emails parsing can be exploited remotely via a specially designed email message to execute arbitrary code.

---

Technical details

Vulnerability (2) can be triggered on stations with Outlook installed. To mitigate this vulnerability you can disable messages preview and disable HTML display in Outlook.

Первичный источник обнаружения

• CVE-2015-6122
  CVE-2015-6118
  CVE-2015-6177
  CVE-2015-6124
  CVE-2015-6172
  CVE-2015-6040
  

Связанные продукты

• Microsoft-Office

Список CVE

• CVE-2015-6122
  critical
• CVE-2015-6118
  critical
• CVE-2015-6177
  critical
• CVE-2015-6124
  critical
• CVE-2015-6172
  critical
• CVE-2015-6040
  critical

Список KB

• 3085549
• 3114422
• 3114479
• 3114431
• 3114425
• 3114433
• 3114382
• 3114415
• 3114342
• 3114403
• 3119518
• 3085528
• 3116111
• 3114457
• 3101532
• 3114458
• 3119517

Смотрите также

Узнай статистику распространения уязвимостей в своем регионе statistics.securelist.com