[Solved] "Office 2016 bundled" Version 1908 Build 11929.20254 detected as Insecure
On bundle line office 2016 is detected as "Insecure" but all desktop products and clicktorun.exe are detected as "OK".
Hope this helps.
OK, then I mark this issue as solved.
@VulnDetect : this topic can be tagged as solved.
@GregAlexandre This is expected and it is due to the way that Office is updated. It is likely to require a reboot before the vulnerable file is removed and replaced by the one in "Updates"
There was only one clicktorun detected. All Build 11929.20254 were "OK".
Today I have two.
Excel and clicktorun in "Program Files\Common Files\microsoft shared\ClickToRun" are detected as "Insecure", Build 11929.20254.
Clicktorun Build 11929.20300 in "C:\Program Files\Common Files\microsoft shared\ClickToRun\Updates\16.0.11929.20300\OfficeClickToRun.exe" is "OK".
Is there more than one ClickToRun.exe detection in the bundle?
Excel and Office Build 11929.20254 should be detected as Insecure and the other Office products should be detected as OK.
Current "OK" is Build 11929.20300 for the Monthly and Semi-Annual Targeted channels for all products.