Vulnerabilities

Improper neutralization of input during web page generation ('cross-site scripting') in Microsoft Office SharePoint allows an authorized attacker to perform spoofing over a network.

Integer underflow (wrap or wraparound) in Microsoft Office allows an unauthorized attacker to execute code locally.

Improper neutralization of input during web page generation ('cross-site scripting') in Microsoft Office SharePoint allows an unauthorized attacker to perform spoofing over a network.

Issue summary: The implementations of AES-SIV (RFC 5297) and AES-GCM-SIV<br /> (RFC 8452) mishandle the authentication of AAD (Additional Authenticated<br /> Data) with an empty ciphertext allowing a forgery of such messages.<br /> <br /> Impact summary: An attacker can forge empty messages with arbitrary AAD<br /> to the victim&amp;#39;s application using these ciphers.<br /> <br /> AES-SIV (RFC 5297) and AES-GCM-SIV (RFC 8452) are nonce-misuse-resistant AEAD<br /> modes: they accept a key, nonce, optional AAD (bytes that are authenticated<br /> but not encrypted), and plaintext, and produces ciphertext plus a 16-byte<br /> tag. On decrypt, `EVP_DecryptFinal_ex()` is documented to return success only<br /> if the tag is verified succesfully.<br /> <br /> In OpenSSL&amp;#39;s provider implementation of these ciphers, the expected tag is<br /> computed only when decryption function is invoked with non-empty data.<br /> If the caller supplies AAD and then calls `EVP_DecryptFinal_ex()` without<br /> invocation of the ciphertext update, which can happen when the received<br /> ciphertext length is zero, the tag is never recalculated and still holds its<br /> all-zeros value.<br /> <br /> When AES-GCM-SIV is used, an attacker who sends arbitrary AAD, empty<br /> ciphertext, and all-zeros tag passes authentication under any key they do not<br /> know, single-shot. When AES-SIV is used, for mounting the attack it&amp;#39;s<br /> necessary for the application to reuse the decryption context without<br /> resetting the key.<br /> <br /> AES-SIV is implemented since OpenSSL 3.0. AES-GCM-SIV is implemented since<br /> OpenSSL 3.2.<br /> <br /> No protocols implemented in OpenSSL itself (TLS/CMS/PKCS7/HPKE/QUIC) support<br /> either AES-GCM-SIV or AES-SIV. To mount an attack, the applications must<br /> implement their own protocol and use the EVP interface. Also they must skip the<br /> ciphertext update when a message with an empty ciphertext arrives.<br /> <br /> The FIPS modules in 4.0, 3.6, 3.5, 3.4, and 3.0 are not affected by this<br /> issue, as these algorithms are not FIPS approved and the affected code is<br /> outside the OpenSSL FIPS module boundary.

Improper neutralization of input during web page generation (&amp;#39;cross-site scripting&amp;#39;) in Microsoft Office SharePoint allows an unauthorized attacker to perform spoofing over a network.

Improper limitation of a pathname to a restricted directory (&amp;#39;path traversal&amp;#39;) in Microsoft Office SharePoint allows an authorized attacker to execute code over a network.

Out-of-bounds read in Microsoft Office Excel allows an unauthorized attacker to disclose information locally.

Access of resource using incompatible type (&amp;#39;type confusion&amp;#39;) in Microsoft Office allows an unauthorized attacker to execute code locally.

Out-of-bounds read in Microsoft Office Word allows an unauthorized attacker to execute code locally.

Issue summary: A specially crafted PKCS#7 or S/MIME signed message could<br /> trigger a use-after-free during PKCS#7 signature verification.<br /> <br /> Impact summary: A use-after-free may result in process crashes, heap<br /> corruption, or potentially remote code execution.<br /> <br /> When processing a PKCS#7 or S/MIME signed message, if the SignedData<br /> digestAlgorithms field is present as an empty ASN.1 SET, OpenSSL may<br /> incorrectly free a caller-owned BIO during PKCS7_verify(). A subsequent<br /> use of the BIO by the calling application results in a use-after-free<br /> condition.<br /> <br /> In the common case this occurs when the application later calls<br /> BIO_free() on the BIO originally passed to PKCS7_verify(). Depending<br /> on allocator behavior and application-specific BIO usage patterns, this<br /> may result in a crash or other memory corruption. In some application<br /> contexts this may potentially be exploitable for remote code execution.<br /> <br /> Applications that process PKCS#7 or S/MIME signed messages using OpenSSL<br /> PKCS#7 APIs may be affected. Applications using the CMS APIs for this<br /> processing are not affected.<br /> <br /> The FIPS modules in 4.0, 3.6, 3.5, 3.4, and 3.0 are not affected by this<br /> issue, as the affected code is outside the OpenSSL FIPS module boundary.

Concurrent execution using shared resource with improper synchronization (&amp;#39;race condition&amp;#39;) in Microsoft Office Excel allows an unauthorized attacker to execute code locally.

Heap-based buffer overflow in Microsoft Office allows an unauthorized attacker to execute code locally.