Lucene search

MicrosoftCVE-2016-7234

HistoryNov 10, 2016 - 6:59 a.m.

CVE-2016-7234

2016-11-1006:59:47

CWE-119

microsoft

web.nvd.nist.gov

cve-2016-7234

microsoft word

office 2010

word 2013

excel

office compatibility pack

sharepoint server

office web apps

CVSS2

9.3

Attack Vector

NETWORK

Attack Complexity

MEDIUM

Authentication

NONE

Confidentiality Impact

COMPLETE

Integrity Impact

COMPLETE

Availability Impact

COMPLETE

AV:N/AC:M/Au:N/C:C/I:C/A:C

CVSS3

7.8

Attack Vector

LOCAL

Attack Complexity

LOW

Privileges Required

NONE

User Interaction

REQUIRED

Scope

UNCHANGED

Confidentiality Impact

HIGH

Integrity Impact

HIGH

Availability Impact

HIGH

CVSS:3.0/AV:L/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H

AI Score

7.7

Confidence

High

EPSS

0.486

Percentile

97.5%

JSON

Microsoft Word 2007, Office 2010 SP2, Word 2010 SP2, Word 2013 SP1, Word 2013 RT SP1, Word for Mac 2011, Excel for Mac 2011, Word 2016 for Mac, Office Compatibility Pack SP3, Word Automation Services on SharePoint Server 2010 SP2, Word Automation Services on SharePoint Server 2013 SP1, Office Web Apps 2010 SP2, and Office Web Apps Server 2013 SP1 allow remote attackers to execute arbitrary code via a crafted Office document, aka “Microsoft Office Memory Corruption Vulnerability.”

Affected configurations

Nvd

Node

microsoftexcel_for_macMatch2011

microsoftofficeMatch2010sp2

microsoftoffice_compatibility_packsp3

microsoftoffice_web_appsMatch2010sp2

microsoftoffice_web_appsMatch2013sp1

microsoftsharepoint_serverMatch2010sp2

microsoftsharepoint_serverMatch2013sp1

microsoftwordMatch2007

microsoftwordMatch2010sp2

microsoftwordMatch2013sp1

microsoftwordMatch2013sp1rt

microsoftword_for_macMatch2011

microsoftword_for_macMatch2016

VendorProductVersionCPE
microsoftexcel_for_mac2011cpe:2.3:a:microsoft:excel_for_mac:2011:*:*:*:*:*:*:*
microsoftoffice2010cpe:2.3:a:microsoft:office:2010:sp2:*:*:*:*:*:*
microsoftoffice_compatibility_pack*cpe:2.3:a:microsoft:office_compatibility_pack:*:sp3:*:*:*:*:*:*
microsoftoffice_web_apps2010cpe:2.3:a:microsoft:office_web_apps:2010:sp2:*:*:*:*:*:*
microsoftoffice_web_apps2013cpe:2.3:a:microsoft:office_web_apps:2013:sp1:*:*:*:*:*:*
microsoftsharepoint_server2010cpe:2.3:a:microsoft:sharepoint_server:2010:sp2:*:*:*:*:*:*
microsoftsharepoint_server2013cpe:2.3:a:microsoft:sharepoint_server:2013:sp1:*:*:*:*:*:*
microsoftword2007cpe:2.3:a:microsoft:word:2007:*:*:*:*:*:*:*
microsoftword2010cpe:2.3:a:microsoft:word:2010:sp2:*:*:*:*:*:*
microsoftword2013cpe:2.3:a:microsoft:word:2013:sp1:*:*:*:*:*:*

Vendor	Product	Version	CPE
microsoft	excel_for_mac	2011	cpe:2.3:a:microsoft:excel_for_mac:2011:::::::*
microsoft	office	2010	cpe:2.3:a:microsoft:office:2010:sp2::::::
microsoft	office_compatibility_pack	*	cpe:2.3:a:microsoft:office_compatibility_pack::sp3::::::*
microsoft	office_web_apps	2010	cpe:2.3:a:microsoft:office_web_apps:2010:sp2::::::
microsoft	office_web_apps	2013	cpe:2.3:a:microsoft:office_web_apps:2013:sp1::::::
microsoft	sharepoint_server	2010	cpe:2.3:a:microsoft:sharepoint_server:2010:sp2::::::
microsoft	sharepoint_server	2013	cpe:2.3:a:microsoft:sharepoint_server:2013:sp1::::::
microsoft	word	2007	cpe:2.3:a:microsoft:word:2007:::::::*
microsoft	word	2010	cpe:2.3:a:microsoft:word:2010:sp2::::::
microsoft	word	2013	cpe:2.3:a:microsoft:word:2013:sp1::::::