Test Kennung:	1.3.6.1.4.1.25623.1.0.812202
Kategorie:	Windows : Microsoft Bulletins
Titel:	Microsoft Office 2016 Remote Code Execution Vulnerability (KB4011262)
Zusammenfassung:	This host is missing an important security; update according to Microsoft KB4011262
Beschreibung:	Summary: This host is missing an important security update according to Microsoft KB4011262 Vulnerability Insight: The flaw exists due to microsoft office software fails to properly handle objects in memory. Vulnerability Impact: Successful exploitation will allow an attacker who successfully exploited the vulnerability to run arbitrary code in the context of the current user. Affected Software/OS: Microsoft Office 2016. Solution: The vendor has released updates. Please see the references for more information. CVSS Score: 9.3 CVSS Vector: AV:N/AC:M/Au:N/C:C/I:C/A:C
Querverweis:	Common Vulnerability Exposure (CVE) ID: CVE-2017-11882 BugTraq ID: 101757 http://www.securityfocus.com/bid/101757 CERT/CC vulnerability note: VU#421280 https://www.kb.cert.org/vuls/id/421280 https://www.exploit-db.com/exploits/43163/ http://reversingminds-blog.logdown.com/posts/3907313-fileless-attack-in-word-without-macros-cve-2017-11882 https://0patch.blogspot.com/2017/11/did-microsoft-just-manually-patch-their.html https://0patch.blogspot.com/2017/11/official-patch-for-cve-2017-11882-meets.html https://github.com/0x09AL/CVE-2017-11882-metasploit https://github.com/embedi/CVE-2017-11882 https://github.com/rxwx/CVE-2017-11882 https://github.com/unamer/CVE-2017-11882 https://researchcenter.paloaltonetworks.com/2017/12/unit42-analysis-of-cve-2017-11882-exploit-in-the-wild/ https://web.archive.org/web/20181104111128/https://embedi.com/blog/skeleton-closet-ms-office-vulnerability-you-didnt-know-about/ http://www.securitytracker.com/id/1039783
Copyright	Copyright (C) 2017 Greenbone AG

Dies ist nur einer von 145615 Anfälligkeitstests in unserem Testpaket. Finden Sie mehr über unsere vollständigen Sicherheitsüberprüfungen heraus. Um einen gratis Test für diese Anfälligkeit auf Ihrem System durchlaufen zu lassen, registrieren Sie sich bitte unten.