Kim Dong-Uk

O problema está relacionado à validação insuficiente de dados no componente Installer, permitindo que um invasor local realize escalonamento de privilégios por meio de um arquivo malicioso. Isso pode levar a um invasor obter privilégios mais elevados no sistema.

The issue is related to insufficient input validation in Microsoft Visio, which is part of Microsoft Office and 365 Apps for Enterprise. This can allow an attacker to execute arbitrary code.

The issue is related to insufficient input validation in Microsoft Visio, a part of Microsoft Office and 365 Apps for Enterprise. This can allow an attacker to execute arbitrary code.

The issue is related to insufficient input validation in Microsoft Office. Exploitation of this issue may allow an attacker to execute arbitrary code.

A security issue exists in FBX that could lead to remote code execution. The vulnerability is related to errors in processing input data, which can be exploited by opening a specially crafted malicious file. To mitigate this issue, the ability to insert FBX files has been disabled in Word, Excel, PowerPoint, and Outlook for Windows and Mac. 3D models in Office documents that were previously inserted from a FBX file will continue to work as expected unless the Link to File option was chosen at insert time.

The issue is related to insufficient input validation in Windows Media Player, which can be exploited by an attacker to execute arbitrary code using a specially crafted file. This allows remote attackers to execute arbitrary code and affect the system.