Lucene search

MicrosoftCVE-2016-7263

HistoryDec 20, 2016 - 6:59 a.m.

CVE-2016-7263

2016-12-2006:59:00

CWE-119

microsoft

web.nvd.nist.gov

microsoft

excel

mac

remote attackers

arbitrary code execution

denial of service

memory corruption

vulnerability

CVSS2

9.3

Attack Vector

NETWORK

Attack Complexity

MEDIUM

Authentication

NONE

Confidentiality Impact

COMPLETE

Integrity Impact

COMPLETE

Availability Impact

COMPLETE

AV:N/AC:M/Au:N/C:C/I:C/A:C

CVSS3

7.8

Attack Vector

LOCAL

Attack Complexity

LOW

Privileges Required

NONE

User Interaction

REQUIRED

Scope

UNCHANGED

Confidentiality Impact

HIGH

Integrity Impact

HIGH

Availability Impact

HIGH

CVSS:3.0/AV:L/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H

AI Score

Confidence

High

EPSS

0.065

Percentile

93.7%

JSON

Microsoft Excel for Mac 2011 and Excel 2016 for Mac allow remote attackers to execute arbitrary code or cause a denial of service (memory corruption) via a crafted document, aka “Microsoft Office Memory Corruption Vulnerability.”

Affected configurations

Nvd

Node

microsoftexcel_for_macMatch2011

microsoftexcel_for_macMatch2016

VendorProductVersionCPE
microsoftexcel_for_mac2011cpe:2.3:a:microsoft:excel_for_mac:2011:*:*:*:*:*:*:*
microsoftexcel_for_mac2016cpe:2.3:a:microsoft:excel_for_mac:2016:*:*:*:*:*:*:*

Vendor	Product	Version	CPE
microsoft	excel_for_mac	2011	cpe:2.3:a:microsoft:excel_for_mac:2011:::::::*
microsoft	excel_for_mac	2016	cpe:2.3:a:microsoft:excel_for_mac:2016:::::::*