CVE-2016-0136 Microsoft Excel 2007 SP3, Excel 2010 SP2, Office Compatibility Pack SP3, Excel Services on SharePoint Server 2007 SP3, and Excel Services on SharePoint Server 2010 SP2 allow remote attackers to execut...
HighCVSS 7.8
EPSS 20.2%
- Published
- Updated
- Exploit status
- No public exploit known
Description
Microsoft Excel 2007 SP3, Excel 2010 SP2, Office Compatibility Pack SP3, Excel Services on SharePoint Server 2007 SP3, and Excel Services on SharePoint Server 2010 SP2 allow remote attackers to execute arbitrary code via a crafted Office document, aka "Microsoft Office Memory Corruption Vulnerability."
Affected products
| Product | Affected versions | Fixed in |
|---|---|---|
| Microsoft excel | = 2007-sp3 | No fix listed |
| Microsoft excel | = 2010-sp2 | No fix listed |
| Microsoft office compatibility pack | All versions | No fix listed |
| Microsoft sharepoint designer | = 2007-sp3 | No fix listed |
| Microsoft sharepoint foundation | = 2010-sp2 | No fix listed |
References
- 1035524 vdb-entry
- 1035525 vdb-entry
- MS16-042 vendor-advisory
- 20160412 Microsoft Excel Uninitialized Pointer Memory Corruption Vulnerability third-party-advisory