Test ID:	1.3.6.1.4.1.25623.1.0.813022
Category:	Windows : Microsoft Bulletins
Title:	Microsoft Office Web Apps Server 2013 RCE And Information Disclosure Vulnerabilities (KB4011692)
Summary:	This host is missing an important security; update according to Microsoft KB4011692
Description:	Summary: This host is missing an important security update according to Microsoft KB4011692 Vulnerability Insight: Multiple flaws are due to: - Microsoft Office software reads out of bound memory due to an uninitialized variable. - Office software fails to properly handle objects in memory. Vulnerability Impact: Successful exploitation will allow an attacker to run arbitrary code in the context of the current user. If the current user is logged on with administrative user rights, an attacker could take control of the affected system and also to view out of bound memory. Affected Software/OS: Microsoft Office Web Apps Server 2013 Service Pack 1. Solution: The vendor has released updates. Please see the references for more information. CVSS Score: 9.3 CVSS Vector: AV:N/AC:M/Au:N/C:C/I:C/A:C
Cross-Ref:	Common Vulnerability Exposure (CVE) ID: CVE-2018-0919 BugTraq ID: 103311 http://www.securityfocus.com/bid/103311 http://www.securitytracker.com/id/1040526 Common Vulnerability Exposure (CVE) ID: CVE-2018-0922 BugTraq ID: 103314 http://www.securityfocus.com/bid/103314 http://www.securitytracker.com/id/1040511
Copyright	Copyright (C) 2018 Greenbone AG

This is only one of 145615 vulnerability tests in our test suite. Find out more about running a complete security audit. To run a free test of this vulnerability against your system, register below.