Summary
| Detail | |||
|---|---|---|---|
| Vendor | Microsoft | First view | 1999-12-31 |
| Product | Powerpoint | Last view | 2024-02-13 |
| Version | 2010 | Type | |
| Update | |||
| Edition | |||
| Language | |||
| Sofware Edition | |||
| Target Software | |||
| Target Hardware | |||
| Other | |||
Activity : Overall
COMMON PLATFORM ENUMERATION: Repartition per Version
Related : CVE
| Date | Alert | Description | |
|---|---|---|---|
| 7.8 | 2024-02-13 | CVE-2024-20673 | Microsoft Office Remote Code Execution Vulnerability |
| 7.8 | 2022-04-15 | CVE-2022-26903 | Windows Graphics Component Remote Code Execution Vulnerability |
| 7.8 | 2021-03-11 | CVE-2021-27056 | Microsoft PowerPoint Remote Code Execution Vulnerability |
| 7.8 | 2020-12-10 | CVE-2020-17124 | Microsoft PowerPoint Remote Code Execution Vulnerability |
| 8.8 | 2020-04-15 | CVE-2020-0760 | A remote code execution vulnerability exists when Microsoft Office improperly loads arbitrary type libraries, aka 'Microsoft Office Remote Code Execution Vulnerability'. This CVE ID is unique from CVE-2020-0991. |
| 7.8 | 2019-12-10 | CVE-2019-1462 | A remote code execution vulnerability exists in Microsoft PowerPoint software when the software fails to properly handle objects in memory, aka 'Microsoft PowerPoint Remote Code Execution Vulnerability'. |
| 7.8 | 2018-12-11 | CVE-2018-8628 | A remote code execution vulnerability exists in Microsoft PowerPoint software when the software fails to properly handle objects in memory, aka "Microsoft PowerPoint Remote Code Execution Vulnerability." This affects Microsoft Office, Office 365 ProPlus, Microsoft PowerPoint, Microsoft SharePoint, Microsoft PowerPoint Viewer, Office Online Server, Microsoft SharePoint Server. |
| 8.8 | 2018-10-10 | CVE-2018-8501 | A remote code execution vulnerability exists in Microsoft PowerPoint software when the software fails to properly handle objects in Protected View, aka "Microsoft PowerPoint Remote Code Execution Vulnerability." This affects Office 365 ProPlus, PowerPoint Viewer, Microsoft Office, Microsoft PowerPoint. |
| 8.8 | 2018-08-15 | CVE-2018-8376 | A remote code execution vulnerability exists in Microsoft PowerPoint software when the software fails to properly handle objects in memory, aka "Microsoft PowerPoint Remote Code Execution Vulnerability." This affects Microsoft PowerPoint. |
| 7.8 | 2017-09-12 | CVE-2017-8743 | A remote code execution vulnerability exists in Microsoft PowerPoint 2016, Microsoft SharePoint Enterprise Server 2016, and Office Online Server when they fail to properly handle objects in memory, aka "PowerPoint Remote Code Execution Vulnerability". This CVE ID is unique from CVE-2017-8742. |
| 7.8 | 2017-09-12 | CVE-2017-8742 | A remote code execution vulnerability exists in Microsoft PowerPoint 2007 Service Pack 3, Microsoft PowerPoint 2010 Service Pack 2, Microsoft PowerPoint 2013 Service Pack 1, Microsoft PowerPoint 2013 RT Service Pack 1, Microsoft PowerPoint 2016, Microsoft PowerPoint Viewer 2007, Microsoft SharePoint Server 2013 Service Pack 1, Microsoft SharePoint Enterprise Server 2016, Microsoft Office Web Apps 2010 Service Pack 2, and Microsoft Office Compatibility Pack Service Pack 3 when they fail to properly handle objects in memory, aka "PowerPoint Remote Code Execution Vulnerability". This CVE ID is unique from CVE-2017-8743. |
| 7.8 | 2017-06-14 | CVE-2017-8513 | A remote code execution vulnerability exists in Microsoft PowerPoint when the software fails to properly handle objects in memory, aka "Microsoft PowerPoint Remote Code Execution Vulnerability". |
| 7.8 | 2016-11-10 | CVE-2016-7230 | Microsoft PowerPoint 2010 SP2, PowerPoint Viewer, and Office Web Apps 2010 SP2 allow remote attackers to execute arbitrary code via a crafted Office document, aka "Microsoft Office Memory Corruption Vulnerability." |
| 7.8 | 2016-09-14 | CVE-2016-3360 | Microsoft PowerPoint 2007 SP3, PowerPoint 2010 SP2, PowerPoint 2013 SP1, PowerPoint 2013 RT SP1, PowerPoint 2016 for Mac, Office Compatibility Pack SP3, PowerPoint Viewer, SharePoint Server 2013 SP1, Office Web Apps 2010 SP2, and Office Web Apps Server 2013 SP1 allow remote attackers to execute arbitrary code via a crafted document, aka "Microsoft Office Memory Corruption Vulnerability." |
| 5.5 | 2016-07-12 | CVE-2016-3279 | Microsoft Office 2010 SP2, Excel 2010 SP2, PowerPoint 2010 SP2, Word 2010 SP2, Excel 2013 SP1, PowerPoint 2013 SP1, Word 2013 SP1, Excel 2013 RT SP1, PowerPoint 2013 RT SP1, Word 2013 RT SP1, Excel 2016, Word 2016, Word Automation Services on SharePoint Server 2010 SP2, and Office Web Apps 2010 SP2 allow remote attackers to execute arbitrary code via a crafted XLA file, aka "Microsoft Office Remote Code Execution Vulnerability." |
| 4.3 | 2016-01-13 | CVE-2016-0012 | Microsoft Office 2007 SP3, Excel 2007 SP3, PowerPoint 2007 SP3, Visio 2007 SP3, Word 2007 SP3, Office 2010 SP2, Excel 2010 SP2, PowerPoint 2010 SP2, Visio 2010 SP2, Word 2010 SP2, Office 2013 SP1, Excel 2013 SP1, PowerPoint 2013 SP1, Visio 2013 SP1, Word 2013 SP1, Excel 2013 RT SP1, PowerPoint 2013 RT SP1, Word 2013 RT SP1, Office 2016, Excel 2016, PowerPoint 2016, Visio 2016, Word 2016, and Visual Basic 6.0 Runtime allow remote attackers to bypass the ASLR protection mechanism via unspecified vectors, aka "Microsoft Office ASLR Bypass." |
| 9.3 | 2015-11-11 | CVE-2015-2503 | Microsoft Access 2007 SP3, Excel 2007 SP3, InfoPath 2007 SP3, OneNote 2007 SP3, PowerPoint 2007 SP3, Project 2007 SP3, Publisher 2007 SP3, Visio 2007 SP3, Word 2007 SP3, Office 2007 IME (Japanese) SP3, Access 2010 SP2, Excel 2010 SP2, InfoPath 2010 SP2, OneNote 2010 SP2, PowerPoint 2010 SP2, Project 2010 SP2, Publisher 2010 SP2, Visio 2010 SP2, Word 2010 SP2, Pinyin IME 2010, Access 2013 SP1, Excel 2013 SP1, InfoPath 2013 SP1, OneNote 2013 SP1, PowerPoint 2013 SP1, Project 2013 SP1, Publisher 2013 SP1, Visio 2013 SP1, Word 2013 SP1, Excel 2013 RT SP1, OneNote 2013 RT SP1, PowerPoint 2013 RT SP1, Word 2013 RT SP1, Access 2016, Excel 2016, OneNote 2016, PowerPoint 2016, Project 2016, Publisher 2016, Visio 2016, Word 2016, Skype for Business 2016, and Lync 2013 SP1 allow remote attackers to bypass a sandbox protection mechanism and gain privileges via a crafted web site that is accessed with Internet Explorer, as demonstrated by a transition from Low Integrity to Medium Integrity, aka "Microsoft Office Elevation of Privilege Vulnerability." |
| 4.3 | 2015-08-14 | CVE-2015-2423 | Microsoft Windows Vista SP2, Windows Server 2008 SP2 and R2 SP1, Windows 7 SP1, Windows 8, Windows 8.1, Windows Server 2012 Gold and R2, Windows RT Gold and 8.1, Windows 10, Excel 2007 SP3, PowerPoint 2007 SP3, Visio 2007 SP3, Word 2007 SP3, Office 2010 SP2, Excel 2010 SP2, PowerPoint 2010 SP2, Visio 2010 SP2, Word 2010 SP2, Excel 2013 SP1, PowerPoint 2013 SP1, Visio 2013 SP1, Word 2013 SP1, Excel 2013 RT SP1, PowerPoint 2013 RT SP1, Visio 2013 RT SP1, Word 2013 RT SP1, and Internet Explorer 7 through 11 allow remote attackers to gain privileges and obtain sensitive information via a crafted command-line parameter to an Office application or Notepad, as demonstrated by a transition from Low Integrity to Medium Integrity, aka "Unsafe Command Line Parameter Passing Vulnerability." |
| 9.3 | 2015-07-14 | CVE-2015-2424 | Microsoft PowerPoint 2007 SP3, Word 2007 SP3, PowerPoint 2010 SP2, Word 2010 SP2, PowerPoint 2013 SP1, Word 2013 SP1, and PowerPoint 2013 RT SP1 allow remote attackers to execute arbitrary code or cause a denial of service (memory corruption) via a crafted Office document, aka "Microsoft Office Memory Corruption Vulnerability." |
| 9.3 | 2015-05-13 | CVE-2015-1682 | Microsoft Office 2010 SP2, Excel 2010 SP2, PowerPoint 2010 SP2, Word 2010 SP2, Office 2013 SP1, Excel 2013 SP1, PowerPoint 2013 SP1, Word 2013 SP1, Office 2013 RT SP1, Excel 2013 RT SP1, PowerPoint 2013 RT SP1, Word 2013 RT SP1, Office for Mac 2011, Excel for Mac 2011, PowerPoint for Mac 2011, Word for Mac 2011, PowerPoint Viewer, Word Automation Services on SharePoint Server 2010 SP2 and 2013 SP1, Excel Services on SharePoint Server 2010 SP2 and 2013 SP1, Office Web Apps 2010 SP2, Excel Web App 2010 SP2, Office Web Apps Server 2013 SP1, SharePoint Foundation 2010 SP2, and SharePoint Server 2013 SP1 allow remote attackers to execute arbitrary code via a crafted document, aka "Microsoft Office Memory Corruption Vulnerability." |
| 9.3 | 2015-03-11 | CVE-2015-0097 | Microsoft Excel 2007 SP3, PowerPoint 2007 SP3, Word 2007 SP3, Excel 2010 SP2, PowerPoint 2010 SP2, and Word 2010 SP2 allow remote attackers to execute arbitrary code via a crafted Office document, aka "Microsoft Word Local Zone Remote Code Execution Vulnerability." |
| 9.3 | 2015-03-11 | CVE-2015-0085 | Use-after-free vulnerability in Microsoft Office 2007 SP3, Excel 2007 SP3, PowerPoint 2007 SP3, Word 2007 SP3, Office 2010 SP2, Excel 2010 SP2, PowerPoint 2010 SP2, Word 2010 SP2, Office 2013 Gold and SP1, Word 2013 Gold and SP1, Office 2013 RT Gold and SP1, Word 2013 RT Gold and SP1, Excel Viewer, Office Compatibility Pack SP3, Word Automation Services on SharePoint Server 2010 SP2, Excel Services on SharePoint Server 2013 Gold and SP1, Word Automation Services on SharePoint Server 2013 Gold and SP1, Web Applications 2010 SP2, Office Web Apps Server 2010 SP2, Web Apps Server 2013 Gold and SP1, SharePoint Server 2007 SP3, Windows SharePoint Services 3.0 SP3, SharePoint Foundation 2010 SP2, SharePoint Server 2010 SP2, SharePoint Foundation 2013 Gold and SP1, and SharePoint Server 2013 Gold and SP1 allows remote attackers to execute arbitrary code via a crafted Office document, aka "Microsoft Office Component Use After Free Vulnerability." |
| 9.3 | 2011-12-13 | CVE-2011-3413 | Microsoft PowerPoint 2007 SP2; Office 2008 for Mac; Office Compatibility Pack for Word, Excel, and PowerPoint 2007 File Formats SP2; and PowerPoint Viewer 2007 SP2 allow remote attackers to execute arbitrary code or cause a denial of service (memory corruption) via an invalid OfficeArt record in a PowerPoint document, aka "OfficeArt Shape RCE Vulnerability." |
| 9.3 | 2011-12-13 | CVE-2011-3396 | Untrusted search path vulnerability in Microsoft PowerPoint 2007 SP2 and 2010 allows local users to gain privileges via a Trojan horse DLL in the current working directory, aka "PowerPoint Insecure Library Loading Vulnerability." |
| 9.3 | 2011-05-13 | CVE-2011-1270 | Buffer overflow in Microsoft PowerPoint 2002 SP3 and 2003 SP3 allows remote attackers to execute arbitrary code via a crafted PowerPoint document, aka "Presentation Buffer Overrun RCE Vulnerability." |
CWE : Common Weakness Enumeration
| % | id | Name |
|---|---|---|
| 44% (13) | CWE-119 | Failure to Constrain Operations within the Bounds of a Memory Buffer |
| 20% (6) | CWE-94 | Failure to Control Generation of Code ('Code Injection') |
| 10% (3) | CWE-20 | Improper Input Validation |
| 6% (2) | CWE-264 | Permissions, Privileges, and Access Controls |
| 6% (2) | CWE-200 | Information Exposure |
| 3% (1) | CWE-254 | Security Features |
| 3% (1) | CWE-189 | Numeric Errors |
| 3% (1) | CWE-19 | Data Handling |
Oval Markup Language : Definitions
| OvalID | Name |
|---|---|
| oval:org.mitre.oval:def:4307 | GDI+ JPEG Parsing Engine Buffer Overflow (VS.NET 2002) |
| oval:org.mitre.oval:def:4216 | GDI+ JPEG Parsing Engine Buffer Overflow (IE6) |
| oval:org.mitre.oval:def:4003 | GDI+ JPEG Parsing Engine Buffer Overflow (Windows XP) |
| oval:org.mitre.oval:def:3881 | GDI+ JPEG Parsing Engine Buffer Overflow (Office XP,SP2) |
| oval:org.mitre.oval:def:3810 | GDI+ JPEG Parsing Engine Buffer Overflow (Project 2003) |
| oval:org.mitre.oval:def:3320 | GDI+ JPEG Parsing Engine Buffer Overflow Microsoft Office Visio Pro 2003 |
| oval:org.mitre.oval:def:3082 | GDI+ JPEG Parsing Engine Buffer Overflow (Visio Pro 2002) |
| oval:org.mitre.oval:def:3038 | GDI+ JPEG Parsing Engine Buffer Overflow (Project 2002,SP1) |
| oval:org.mitre.oval:def:2706 | GDI+ JPEG Parsing Engine Buffer Overflow (Office 2003) |
| oval:org.mitre.oval:def:1721 | GDI+ JPEG Parsing Engine Buffer Overflow (VS.NET 2003) |
| oval:org.mitre.oval:def:1105 | GDI+ JPEG Parsing Engine Buffer Overflow (Server 2003) |
| oval:org.mitre.oval:def:4022 | Office XP URL Buffer Overflow |
| oval:org.mitre.oval:def:2738 | Microsoft Office Visio Professional URL Buffer Overflow |
| oval:org.mitre.oval:def:2348 | Windows Project Professional URL Buffer Overflow |
| oval:org.mitre.oval:def:1984 | Microsoft PowerPoint 2000 Remote Code Execution Using a Malformed Record Vuln... |
| oval:org.mitre.oval:def:1836 | Microsoft PowerPoint 2002 Remote Code Execution Using a Malformed Record Vuln... |
| oval:org.mitre.oval:def:1069 | Microsoft PowerPoint 2003 Remote Code Execution Using a Malformed Record Vuln... |
| oval:org.mitre.oval:def:348 | Microsoft PowerPoint Malformed Records Vulnerability |
| oval:org.mitre.oval:def:399 | Microsoft PowerPoint Mso.dll Vulnerability |
| oval:org.mitre.oval:def:568 | PowerPoint Malformed Record Memory Corruption Vulnerability |
| oval:org.mitre.oval:def:220 | Microsoft PowerPoint Malformed Record Memory Corruption Vulnerability |
| oval:org.mitre.oval:def:301 | Excel Malformed Record Vulnerability |
| oval:org.mitre.oval:def:6279 | Memory Corruption Vulnerability |
| oval:org.mitre.oval:def:6204 | MS PowerPoint File Parsing Remote Code Execution Vulnerability |
| oval:org.mitre.oval:def:6023 | Memory Corruption Vulnerability |
SAINT Exploits
| Description | Link |
|---|---|
| Microsoft PowerPoint OEPlaceholderAtom placementId memory corruption | More info here |
| Microsoft PowerPoint invalid object reference vulnerability | More info here |
| Microsoft PowerPoint Floating Point Techno-color Time Bandit vulnerability | More info here |
| Microsoft Office PowerPoint Viewer TextBytesAtom Record Buffer Overflow | More info here |
Open Source Vulnerability Database (OSVDB)
| id | Description |
|---|---|
| 77668 | Microsoft Office PowerPoint Path Subversion Arbitrary DLL Injection Code Exec... |
| 77664 | Microsoft Office PowerPoint OfficeArt Shape Record PowerPoint File Handling R... |
| 72236 | Microsoft Office PowerPoint Presentation Parsing Unspecified Overflow |
| 72235 | Microsoft Office PowerPoint File Handling Unspecified Memory Corruption |
| 71771 | Microsoft Office PowerPoint TimeColorBehaviorContainer (Techno-color Time Ban... |
| 71770 | Microsoft Office PowerPoint PersistDirectoryEntry Processing Remote Code Exec... |
| 71769 | Microsoft Office PowerPoint OfficeArt Atom Parsing Remote Code Execution |
| 69091 | Microsoft Office PowerPoint File Animation Node Parsing Underflow Heap Corrup... |
| 69090 | Microsoft Office PowerPoint 95 File Parsing Overflow |
| 67483 | Microsoft Office PowerPoint Path Subversion Arbitrary DLL Injection Code Exec... |
| 62241 | Microsoft Office Powerpoint TextBytesAtom Record Handling Remote Code Execution |
| 62240 | Microsoft Office Powerpoint TextCharsAtom Record Handling Remote Code Execution |
| 62239 | Microsoft Office Powerpoint File Path Handling Overflow |
| 62238 | Microsoft Office Powerpoint LinkedSlideAtom Handling Remote Code Execution |
| 62237 | Microsoft Office Powerpoint OEPlaceholderAtom placementId Parameter Handling ... |
| 62236 | Microsoft Office Powerpoint msofbtClientData Container OEPlaceholderAtom Use ... |
| 54391 | Microsoft Office PowerPoint OutlineTextRefAtom Parsing Memory Corruption Arbi... |
| 54390 | Microsoft Office PowerPoint BuildList Record Parsing Memory Corruption Arbitr... |
| 53182 | Microsoft Office PowerPoint PPT File Handling Unspecified Code Execution |
| 47004 | Microsoft Crypto API S/MIME X.509 Certificate CRL Check Remote Information Di... |
| 35763 | Microsoft PowerPoint Unspecified Arbitrary Code Execution |
| 31901 | Microsoft Office Unspecified String Handling Arbitrary Code Execution |
| 29720 | Microsoft PowerPoint Unspecified Code Execution |
| 29448 | Microsoft PowerPoint Crafted File Unspecified Code Execution |
| 29143 | Microsoft PowerPoint PPT Malformed BIFF File Arbitrary Command Execution |
OpenVAS Exploits
| id | Description |
|---|---|
| 2011-12-14 | Name : Microsoft Office PowerPoint Remote Code Execution Vulnerabilities (2639142) File : nvt/secpod_ms11-094.nasl |
| 2011-05-11 | Name : Microsoft Office PowerPoint Remote Code Execution Vulnerabilities (2545814) File : nvt/secpod_ms11-036.nasl |
| 2011-04-13 | Name : Microsoft Office PowerPoint Remote Code Execution Vulnerabilities (2489283) File : nvt/secpod_ms11-022.nasl |
| 2011-02-23 | Name : Microsoft PowerPoint 2007 OfficeArt Atom Remote Code Execution Vulnerability File : nvt/gb_ms_power_point_code_exec_vuln.nasl |
| 2010-11-10 | Name : Microsoft Office PowerPoint Remote Code Execution Vulnerabilities (2293386) File : nvt/secpod_ms10-088.nasl |
| 2010-09-29 | Name : Microsoft Office Products Insecure Library Loading Vulnerability File : nvt/secpod_ms_office_prdts_insecure_lib_load_vuln.nasl |
| 2010-02-10 | Name : Microsoft Office PowerPoint Remote Code Execution Vulnerabilities (975416) File : nvt/secpod_ms10-004.nasl |
| 2009-06-05 | Name : Ubuntu USN-771-1 (libmodplug) File : nvt/ubuntu_771_1.nasl |
| 2009-06-05 | Name : Ubuntu USN-772-1 (mpfr) File : nvt/ubuntu_772_1.nasl |
| 2009-06-05 | Name : Ubuntu USN-773-1 (pango1.0) File : nvt/ubuntu_773_1.nasl |
| 2009-06-05 | Name : Ubuntu USN-774-1 (moin) File : nvt/ubuntu_774_1.nasl |
| 2009-04-07 | Name : Microsoft PowerPoint File Parsing Remote Code Execution Vulnerability (967340) File : nvt/gb_ms_powerpoint_code_exec_vuln.nasl |
Information Assurance Vulnerability Management (IAVM)
| id | Description |
|---|---|
| 2015-A-0188 | Cumulative Security Update for Microsoft Internet Explorer (MS15-079) Severity: Category I - VMSKEY: V0061297 |
| 2015-A-0194 | Multiple Vulnerabilities in Microsoft Office (MS15-081) Severity: Category II - VMSKEY: V0061307 |
| 2015-A-0197 | Microsoft Command Line Parameter Information Disclosure Vulnerability (MS15-088) Severity: Category II - VMSKEY: V0061313 |
| 2015-A-0163 | Multiple Vulnerabilities in Microsoft Office (MS15-070) Severity: Category II - VMSKEY: V0061121 |
| 2015-A-0103 | Multiple Vulnerabilities in Microsoft Office Products (MS15-046) Severity: Category II - VMSKEY: V0060643 |
| 2015-A-0052 | Multiple Vulnerabilities in Microsoft Office (MS15-022) Severity: Category II - VMSKEY: V0058999 |
| 2011-A-0166 | Multiple Remote Code Execution Vulnerabilities in Microsoft Office PowerPoint Severity: Category II - VMSKEY: V0030831 |
| 2011-A-0047 | Multiple Vulnerabilities in Microsoft Office PowerPoint Severity: Category II - VMSKEY: V0026525 |
| 2010-A-0028 | Multiple Remote Vulnerabilities in Microsoft Office PowerPoint Severity: Category II - VMSKEY: V0022682 |
| 2009-A-0039 | Multiple Vulnerabilities in Microsoft Office PowerPoint Severity: Category I - VMSKEY: V0019159 |
Snort® IPS/IDS
| Date | Description |
|---|---|
| 2014-01-10 | Windows Scripting Host Shell ActiveX CLSID unicode access RuleID : 8067 - Type : WEB-ACTIVEX - Revision : 8 |
| 2014-01-10 | Microsoft Windows Scripting Host Shell ActiveX clsid access RuleID : 8066 - Type : BROWSER-PLUGINS - Revision : 16 |
| 2019-11-19 | Microsoft Office PowerPoint out of bounds value remote code execution attempt RuleID : 51947 - Type : FILE-OFFICE - Revision : 1 |
| 2019-11-19 | Microsoft Office PowerPoint out of bounds value remote code execution attempt RuleID : 51946 - Type : FILE-OFFICE - Revision : 1 |
| 2019-09-12 | Microsoft Office PowerPoint OfficeArt atom memory corruption attempt RuleID : 50962 - Type : FILE-OFFICE - Revision : 1 |
| 2019-01-15 | Microsoft Office Powerpoint use after free attempt RuleID : 48602 - Type : FILE-OFFICE - Revision : 2 |
| 2019-01-15 | Microsoft Office Powerpoint use after free attempt RuleID : 48601 - Type : FILE-OFFICE - Revision : 2 |
| 2018-09-11 | Microsoft PowerPoint slide show type confusion attempt RuleID : 47483 - Type : FILE-OFFICE - Revision : 1 |
| 2018-09-11 | Microsoft PowerPoint slide show type confusion attempt RuleID : 47482 - Type : FILE-OFFICE - Revision : 1 |
| 2017-10-10 | Microsoft Office PowerPoint invalid TextByteAtom remote code execution attempt RuleID : 44280 - Type : FILE-OFFICE - Revision : 1 |
| 2017-02-25 | Microsoft Office PowerPoint malformed msofbtTextbox exploit attempt RuleID : 41414 - Type : FILE-OFFICE - Revision : 1 |
| 2017-02-25 | Microsoft Office PowerPoint malformed msofbtTextbox exploit attempt RuleID : 41413 - Type : FILE-OFFICE - Revision : 1 |
| 2017-01-25 | Microsoft Office PowerPoint improper filename remote code execution attempt RuleID : 41094 - Type : FILE-OFFICE - Revision : 2 |
| 2016-12-06 | Microsoft PowerPoint ntdll out of bounds read attempt RuleID : 40682 - Type : FILE-OFFICE - Revision : 2 |
| 2016-12-06 | Microsoft PowerPoint ntdll out of bounds read attempt RuleID : 40681 - Type : FILE-OFFICE - Revision : 2 |
| 2016-10-13 | Microsoft Office PowerPoint ppcore invalid pointer reference attempt RuleID : 40148 - Type : FILE-OFFICE - Revision : 3 |
| 2016-10-13 | Microsoft Office PowerPoint ppcore invalid pointer reference attempt RuleID : 40147 - Type : FILE-OFFICE - Revision : 3 |
| 2016-03-14 | Microsoft Office Word request for rpawinet.dll over SMB attempt RuleID : 37319 - Type : FILE-OFFICE - Revision : 5 |
| 2016-03-14 | Microsoft Office Word rpawinet.dll dll-load exploit attempt RuleID : 37318 - Type : FILE-OFFICE - Revision : 5 |
| 2016-03-14 | Microsoft Office MScomctl.ocx memory leak attempt RuleID : 37282 - Type : FILE-OTHER - Revision : 2 |
| 2016-03-14 | Microsoft Office MScomctl.ocx memory leak attempt RuleID : 37281 - Type : FILE-OTHER - Revision : 2 |
| 2016-03-14 | Microsoft Office PowerPoint malformed record call to freed object attempt RuleID : 37035 - Type : FILE-OFFICE - Revision : 2 |
| 2016-03-14 | Microsoft Office PowerPoint malformed record call to freed object attempt RuleID : 37034 - Type : FILE-OFFICE - Revision : 2 |
| 2016-03-14 | Microsoft Office PowerPoint malformed record call to freed object attempt RuleID : 37033 - Type : FILE-OFFICE - Revision : 2 |
| 2016-03-14 | Microsoft Office PowerPoint malformed record call to freed object attempt RuleID : 37032 - Type : FILE-OFFICE - Revision : 2 |
Nessus® Vulnerability Scanner
| id | Description |
|---|---|
| 2018-12-13 | Name: An application installed on the remote macOS or Mac OS X host is affected by ... File: macos_ms18_dec_office.nasl - Type: ACT_GATHER_INFO |
| 2017-09-13 | Name: An application installed on the remote Windows host is affected by multiple r... File: smb_nt_ms17_sep_office_web.nasl - Type: ACT_GATHER_INFO |
| 2017-09-12 | Name: The Microsoft Powerpoint Products are affected by multiple vulnerabilities. File: smb_nt_ms17_sep_powerpoint.nasl - Type: ACT_GATHER_INFO |
| 2017-09-12 | Name: The Microsoft Office Products are affected by multiple vulnerabilities. File: smb_nt_ms17_sep_office_viewers.nasl - Type: ACT_GATHER_INFO |
| 2017-09-12 | Name: The Microsoft Sharepoint Server installation on the remote host is affected b... File: smb_nt_ms17_sep_office_sharepoint.nasl - Type: ACT_GATHER_INFO |
| 2017-09-12 | Name: Microsoft Office Compatibility Pack SP3 is affected by multiple vulnerabilities. File: smb_nt_ms17_sep_office_compatibility.nasl - Type: ACT_GATHER_INFO |
| 2017-09-12 | Name: The Microsoft Office Products are affected by multiple vulnerabilities. File: smb_nt_ms17_sep_office.nasl - Type: ACT_GATHER_INFO |
| 2017-06-14 | Name: An application installed on the remote Windows host is affected by multiple v... File: smb_nt_ms17_jun_office_sharepoint.nasl - Type: ACT_GATHER_INFO |
| 2017-06-14 | Name: An application installed on the remote Windows host is affected by multiple v... File: smb_nt_ms17_jun_office.nasl - Type: ACT_GATHER_INFO |
| 2016-11-08 | Name: An application installed on the remote host is affected by multiple vulnerabi... File: smb_nt_ms16-133.nasl - Type: ACT_GATHER_INFO |
| 2016-09-15 | Name: An application installed on the remote Mac OS X host is affected by multiple ... File: macosx_ms16-107_office.nasl - Type: ACT_GATHER_INFO |
| 2016-09-14 | Name: An application installed on the remote host is affected by multiple vulnerabi... File: smb_nt_ms16-107.nasl - Type: ACT_GATHER_INFO |
| 2016-07-12 | Name: An application installed on the remote Windows host is affected by multiple v... File: smb_nt_ms16-088.nasl - Type: ACT_GATHER_INFO |
| 2016-01-12 | Name: The remote Windows host is affected by multiple vulnerabilities. File: smb_nt_ms16-004.nasl - Type: ACT_GATHER_INFO |
| 2015-11-10 | Name: The remote Windows host is affected by multiple vulnerabilities. File: smb_nt_ms15-116.nasl - Type: ACT_GATHER_INFO |
| 2015-08-12 | Name: The remote Windows host is affected by multiple remote code execution vulnera... File: smb_nt_ms15-081.nasl - Type: ACT_GATHER_INFO |
| 2015-08-11 | Name: The remote Windows host is affected by an information disclosure vulnerability. File: smb_nt_ms15-088.nasl - Type: ACT_GATHER_INFO |
| 2015-08-11 | Name: The remote host has a web browser installed that is affected by multiple vuln... File: smb_nt_ms15-079.nasl - Type: ACT_GATHER_INFO |
| 2015-07-14 | Name: The remote Windows host is affected by multiple vulnerabilities. File: smb_nt_ms15-070.nasl - Type: ACT_GATHER_INFO |
| 2015-05-13 | Name: The remote host is affected by multiple remote code execution vulnerabilities. File: smb_nt_ms15-046.nasl - Type: ACT_GATHER_INFO |
| 2015-05-13 | Name: An application installed on the remote Mac OS X host is affected by a remote ... File: macosx_ms15-046_office_2011.nasl - Type: ACT_GATHER_INFO |
| 2015-03-11 | Name: The remote host is affected by multiple remote code execution vulnerabilities. File: smb_nt_ms15-022.nasl - Type: ACT_GATHER_INFO |
| 2011-12-13 | Name: Arbitrary code can be executed on the remote host through Microsoft PowerPoint. File: smb_nt_ms11-094.nasl - Type: ACT_GATHER_INFO |
| 2011-12-13 | Name: An application installed on the remote Mac OS X host is affected by multiple ... File: macosx_ms_office_dec2011.nasl - Type: ACT_GATHER_INFO |
| 2011-06-15 | Name: An application installed on the remote Mac OS X host is affected by multiple ... File: macosx_ms_office_jun2011.nasl - Type: ACT_GATHER_INFO |
