CVE-2016-3360 Microsoft PowerPoint 2007 SP3, PowerPoint 2010 SP2, PowerPoint 2013 SP1, PowerPoint 2013 RT SP1, PowerPoint 2016 for Mac, Office Compatibility Pack SP3, PowerPoint Viewer, SharePoint Server 2013 SP1,....
HighCVSS 7.8
EPSS 17.2%
- Published
- Updated
- Exploit status
- No public exploit known
Description
Microsoft PowerPoint 2007 SP3, PowerPoint 2010 SP2, PowerPoint 2013 SP1, PowerPoint 2013 RT SP1, PowerPoint 2016 for Mac, Office Compatibility Pack SP3, PowerPoint Viewer, SharePoint Server 2013 SP1, Office Web Apps 2010 SP2, and Office Web Apps Server 2013 SP1 allow remote attackers to execute arbitrary code via a crafted document, aka "Microsoft Office Memory Corruption Vulnerability."
Affected products
| Product | Affected versions | Fixed in |
|---|---|---|
| Microsoft office compatibility pack | All versions | No fix listed |
| Microsoft office web apps | = 2010-sp2 | No fix listed |
| Microsoft office web apps server | = 2013-sp1 | No fix listed |
| Microsoft powerpoint | = 2007-sp3 | No fix listed |
| Microsoft powerpoint | = 2010-sp2 | No fix listed |
| Microsoft powerpoint | = 2013-sp1 | No fix listed |
| Microsoft powerpoint for mac | = 2016 | No fix listed |
| Microsoft powerpoint viewer | All versions | No fix listed |
| Microsoft sharepoint designer | = 2013-sp1 | No fix listed |