Code execution vulnerabilities in Microsoft Office

Описание

Multiple serious vulnerabilities have been found in Microsoft Office. Malicious users can exploit these vulnerabilities to execute arbitrary code.

Below is a complete list of vulnerabilities

1. An improper memory objects handling can be exploited remotely via a specially designed content;
2. An improper embedded fonts handling can be exploited remotely via a specially designed content.

---

Technical details

To mitigate vulnerability (2) user can prevent Office from opening RTF documents from unknown or untrusted sources or prevent Word from loading RTF documents. For further instructions take a look at original advisory listed below.

Первичный источник обнаружения

• CVE-2016-0183
  CVE-2016-0126
  CVE-2016-0140
  CVE-2016-0198
  

Связанные продукты

• Microsoft-Office

Список CVE

• CVE-2016-0183
  critical
• CVE-2016-0126
  critical
• CVE-2016-0140
  critical
• CVE-2016-0198
  critical

Список KB

• 3115124
• 3155777
• 3115121
• 2984938
• 3115123
• 3115132
• 3155776
• 2984943
• 3115025
• 3115016
• 3115094
• 3054984
• 3115103
• 3115115
• 3115116
• 3101520
• 3115117
• 3115464
• 3115479
• 3114893
• 3115480
• 3115465

Смотрите также

Узнай статистику распространения уязвимостей в своем регионе statistics.securelist.com