12 exploited vulnerabilities in Office 2010

Vulnerabilities with publicly known exploits

Vendors: Microsoft, Adobe
With known exploits: 12
Affected Microsoft Live Meeting versions: = 2007
Affected Microsoft Lync versions: = 2010, 2013
Affected Microsoft Office versions: = 2007, 2010, 2003, 2013, 2016, 2011
Affected Microsoft Skype For Business versions: = 2016
Affected Microsoft Word Viewer versions: All versions
Affected Microsoft Windows 10 versions: All versions
Affected Microsoft Windows 7 versions: All versions
Affected Microsoft Windows 8.1 versions: All versions

CVE-2016-7182 1 exploit

CVSS 10.0 CRITICAL 2016-10-11FIX AVAILABLE

Microsoft Windows - 'win32k.sys' TTF Processing win32k!sbit_Embolden / win32k!ttfdCloseFontContext Use-After-Free (MS16-120)

CVE-2013-3906 6 exploits

CVSS 10.0 HIGH 2013-11-05FIX AVAILABLE

Microsoft Tagged Image File Format (TIFF) Integer Overflow Microsoft Tagged Image File Format (TIFF) Integer Overflow Vulnerability

CVE-2017-8682 2 exploits

CVSS 9.3 HIGH 2017-09-12FIX AVAILABLE

Microsoft Windows Kernel - win32k.sys TTF Font Processing - Out-of-Bounds Reads/Writes with Malforme Microsoft Windows Kernel - 'win32k.sys' '.TTF' Font Processing Out-of-Bounds Reads/Writes with Malformed 'fpgm' table 'win32k!bGeneratePath' (Denial of Service)

CVE-2017-0283 3 exploits

CVSS 9.3 HIGH 2017-06-13

Microsoft Windows - USP10!MergeLigRecords Uniscribe Font Processing Heap-Based Memory Corruption Microsoft Windows Uniscribe Remote Code Execution Vulnerability(CVE-2017-0283)

CVE-2017-0108 2 exploits

CVSS 9.3 HIGH 2017-03-14FIX AVAILABLE

Microsoft Windows - USP10!otlList::insertAt Uniscribe Font Processing Heap-Based Buffer Overflow (MS Microsoft Windows - 'USP10!otlList::insertAt' Uniscribe Font Processing Heap Buffer Overflow (MS17-011)

CVE-2016-3357 2 exploits

CVSS 9.3 HIGH 2016-09-13FIX AVAILABLE

Microsoft Office PowerPoint 2010 - Invalid Pointer Reference Microsoft Office PowerPoint 2010 - Invalid Pointer Reference

CVE-2016-0145 2 exploits

CVSS 9.3 HIGH 2016-04-12FIX AVAILABLE

Microsoft Windows - Kernel win32k.sys TTF Processing EBLC / EBSC Tables Pool Corruption (MS16-039)Microsoft Windows Kernel - 'win32k.sys' TTF Processing EBLC / EBSC Tables Pool Corruption (MS16-039)

CVE-2015-2470 1 exploit

CVSS 9.3 HIGH 2015-08-11FIX AVAILABLE

Microsoft Office 2007 - MSPTLS Heap Index Integer Underflow (MS15-081)

CVE-2015-2463 2 exploits

CVSS 9.3 HIGH 2015-08-11FIX AVAILABLE

Windows win32k.sys TTF Font Processing win32k!fsc_RemoveDups Out-of-Bounds Pool Memory Access Microsoft Windows - 'win32k.sys' TTF Font Processing win32k!fsc_RemoveDups Out-of-Bounds Pool Memory Access

CVE-2015-2510 1 exploit

CVSS 9.3 HIGH 2015-09-08FIX AVAILABLE

Microsoft Office 2007 - 'OGL.dll' ValidateBitmapInfo Bounds Check Failure (MS15-097)

CVE-2016-3209 1 exploit

CVSS 5.5 MEDIUM 2016-10-11FIX AVAILABLE

Microsoft Windows - 'win32k.sys' TTF Processing RCVT TrueType Instruction Handler Out-of-Bounds Read (MS16-120)

CVE-2008-5180 6 exploits

CVSS 5.3 MEDIUM 2008-11-20

Microsoft Office 2010 Beta - Communicator SIP Denial of Service msoffice-dos.txt