CVE-2016-7232 Microsoft Word 2007, Office 2010 SP2, Word 2010 SP2, Word for Mac 2011, and Office Compatibility Pack SP3 allow remote attackers to execute arbitrary code via a crafted Office document, aka "Microsoft...
HighCVSS 7.8
EPSS 24.9%
- Published
- Updated
- Exploit status
- No public exploit known
Description
Microsoft Word 2007, Office 2010 SP2, Word 2010 SP2, Word for Mac 2011, and Office Compatibility Pack SP3 allow remote attackers to execute arbitrary code via a crafted Office document, aka "Microsoft Office Memory Corruption Vulnerability."
Affected products
| Product | Affected versions | Fixed in |
|---|---|---|
| Microsoft office | = 2010-sp2 | No fix listed |
| Microsoft office compatibility pack | All versions | No fix listed |
| Microsoft word | = 2007 | No fix listed |
| Microsoft word | = 2010-sp2 | No fix listed |
| Microsoft word for mac | = 2011 | No fix listed |
References
- 94005 vdb-entry
- 1037246 vdb-entry
- MS16-133 vendor-advisory
- 20161108 Microsoft Word 2010 Out-of-Bounds Write Heap Corruption Vulnerability third-party-advisory