Lucene search

K
cve[email protected]CVE-2016-7233
HistoryNov 10, 2016 - 6:59 a.m.

CVE-2016-7233

2016-11-1006:59:46
CWE-200
web.nvd.nist.gov
57
4
cve-2016-7233
microsoft word
office 2010
word 2010
word for mac 2011
excel for mac 2011
word viewer
office compatibility pack
sharepoint server 2013
office web apps 2010
remote attack
memory disclosure
denial of service

4.3 Medium

CVSS2

Attack Vector

NETWORK

Attack Complexity

MEDIUM

Authentication

NONE

Confidentiality Impact

PARTIAL

Integrity Impact

NONE

Availability Impact

NONE

AV:N/AC:M/Au:N/C:P/I:N/A:N

6.5 Medium

CVSS3

Attack Vector

NETWORK

Attack Complexity

LOW

Privileges Required

NONE

User Interaction

REQUIRED

Scope

UNCHANGED

Confidentiality Impact

HIGH

Integrity Impact

NONE

Availability Impact

NONE

CVSS:3.0/AV:N/AC:L/PR:N/UI:R/S:U/C:H/I:N/A:N

6.3 Medium

AI Score

Confidence

High

0.178 Low

EPSS

Percentile

96.2%

Microsoft Word 2007, Office 2010 SP2, Word 2010 SP2, Word for Mac 2011, Excel for Mac 2011, Word Viewer, Office Compatibility Pack SP3, Word Automation Services on SharePoint Server 2013 SP1, and Office Web Apps 2010 SP2 allow remote attackers to obtain sensitive information from process memory or cause a denial of service (out-of-bounds read) via a crafted Office document, aka “Microsoft Office Information Disclosure Vulnerability.”

Affected configurations

NVD
Node
microsoftexcel_for_macMatch2011
OR
microsoftofficeMatch2010sp2
OR
microsoftoffice_compatibility_packsp3
OR
microsoftoffice_web_appsMatch2010sp2
OR
microsoftsharepoint_serverMatch2013sp1
OR
microsoftwordMatch2007
OR
microsoftwordMatch2010sp2
OR
microsoftword_automation_servicesMatch-
OR
microsoftword_for_macMatch2011
OR
microsoftword_viewerMatch-

Social References

More

4.3 Medium

CVSS2

Attack Vector

NETWORK

Attack Complexity

MEDIUM

Authentication

NONE

Confidentiality Impact

PARTIAL

Integrity Impact

NONE

Availability Impact

NONE

AV:N/AC:M/Au:N/C:P/I:N/A:N

6.5 Medium

CVSS3

Attack Vector

NETWORK

Attack Complexity

LOW

Privileges Required

NONE

User Interaction

REQUIRED

Scope

UNCHANGED

Confidentiality Impact

HIGH

Integrity Impact

NONE

Availability Impact

NONE

CVSS:3.0/AV:N/AC:L/PR:N/UI:R/S:U/C:H/I:N/A:N

6.3 Medium

AI Score

Confidence

High

0.178 Low

EPSS

Percentile

96.2%