Navigation section
protected view
-
Extending the Microsoft Office Bounty Program
Microsoft announces the extension of the Microsoft Office Bounty Program through December 31, 2017. This extension is retroactive for any cases submitted during the interim. The engagement we have had with the security community has been great and we are looking to continue that collaboration...- News
- Thread
- bounty program code execution collaboration community early access innovation macro security microsoft office office insider outlook payout protect customers protected view quality improvement security submission testing user engagement vulnerabilities
- Replies: 0
- Forum: Security Alerts
-
Announcing the new Bug Bounty Program for Office Insider Builds on Windows
We’ve engineered Office to be secure by design and continually invest in enhancing its security capabilities. In the spirit of maintaining a high security bar in Office, we’re launching the Bug Bounty Program for Office Insider Builds on Windows. The Office Bug Bounty Program complements our...- News
- Thread
- bug bounty cloud services code execution customer protection early access incentives macros march 2017 microsoft office office insider penetration testing protected view quality assurance reward program security testing updates user feedback vulnerabilities windows
- Replies: 0
- Forum: Security Alerts
-
MS11-045 - Important : Vulnerabilities in Microsoft Excel Could Allow Remote Code Execution (2537146
Severity Rating: Important Revision Note: V1.1 (August 10, 2011): Removed two erroneous workarounds in this bulletin's vulnerability section for CVE-2011-1276. This is an informational change only. Summary: This security update resolves eight privately reported...- News
- Thread
- administrative rights bug fix cve-2011-1272 cve-2011-1273 cve-2011-1279 excel fix it solution informational knowledge base microsoft microsoft office office file validation patch protected view remote code execution security update user rights vulnerabilities
- Replies: 0
- Forum: Security Alerts
-
MS11-045 - Important: Vulnerabilities in Microsoft Excel Could Allow Remote Code Execution (2537146)
Severity Rating: Important - Revision Note: V1.0 (June 14, 2011): Bulletin published.Summary: This security update resolves eight privately reported vulnerabilities in Microsoft Office. The vulnerabilities could allow remote code execution if a user opens a specially crafted Excel file. An...- News
- Thread
- administrative rights cve cve-2011 excel exploit file validation fix it important information knowledge base microsoft office update patch protected view remote code execution security update bulletin user rights vulnerabilities
- Replies: 0
- Forum: Security Alerts
-
More about the Office File Validation backport plan
In November 2010, Microsoft released the first Security Bulletin (Link Removed due to 404 Error) against an Office 2010 component, in this case Microsoft Word. Approximately 6 months had elapsed since Office 2010 launched in May and while it's good for such a widely used product to be available...- News
- Thread
- document files download enhancement file formats file parsing file validation fuzzing tests microsoft engineering microsoft word office 2003 office 2007 office 2010 protected view security bulletin security engineering security features software security software update user protection vulnerabilities
- Replies: 0
- Forum: Security Alerts
-
Microsoft Office "Anti-Bulletin"
In November 2010, Microsoft released the first Security Bulletin (Link Removed due to 404 Error) against an Office 2010 component, in this case Microsoft Word. Approximately 6 months had elapsed since Office 2010 launched in May and while it's good for such a widely used product to be available...- News
- Thread
- bulletin development document security file parsing file validation fuzzing microsoft microsoft engineering office 2003 office 2007 office 2010 protected view security software enhancement testing threat mitigation updates user safety vulnerabilities word 2010
- Replies: 0
- Forum: Security Alerts
-
Benefits of Office 2010 File Validation will be made available for Office 2003 and 2007
Hello everyone -- We're really excited to announce that Office File Validation, currently part of Office 2010, will soon be made available for Office 2003 and 2007. During development of Office 2010, the Office Team, in conjunction with members of the Microsoft Engineering Center (MSEC)...- News
- Thread
- binary schema customer preparation deployment file format file validation microsoft msec office 2003 office 2007 office 2010 office team protected view security
- Replies: 0
- Forum: Security Alerts
-
Microsoft admits it can’t stop Office file format hacks
Microsoft’s plan to “sandbox†Office documents in the next version of its application suite is an admission that the company cannot keep hackers from exploiting file format bugs, a security analyst said on July 23. “What’s been happening is that Office has lots of...- reghakr
- Thread
- application suite computer security cybersecurity excel file formats fuzzing hacking information security malware microsoft office office 2010 patching powerpoint protected view sandbox security updates vulnerabilities word
- Replies: 1
- Forum: Windows News