Multiple vulnerabilities in Microsoft Office

Описание

Multiple serious vulnerabilities have been found in Microsoft Office. Malicious users can exploit these vulnerabilities to execute arbitrary code, gain privileges or obtain sensitive information. Below is a complete list of vulnerabilities

1. An improper memory objects handling can be exploited remotely via a specially designed document to execute arbitrary code;
2. An improper memory content disclosure can be exploited remotely via a specially designed document to obtain sensitive information;
3. An improper input validation can be exploited locally via a specially designed application to gain privileges.

Первичный источник обнаружения

• CVE-2016-3235
  CVE-2016-3234
  CVE-2016-3233
  

Эксплуатация

Public exploits exist for this vulnerability.

Связанные продукты

• Microsoft-Visio-2010
• Microsoft-Office
• Microsoft-Excel
• Microsoft-Word

Список CVE

• CVE-2016-3235
  unknown
• CVE-2016-3234
  unknown
• CVE-2016-3233
  unknown

Список KB

• 3115187
• 3115020
• 3115041
• 2999465
• 3115244
• 3114740
• 3115107
• 3115243
• 3114872
• 3115194
• 3115195
• 3115196
• 3115198
• 3115014
• 3115111
• 3115130
• 2596915
• 3115170

Смотрите также

Узнай статистику распространения уязвимостей в своем регионе statistics.securelist.com