CVE-2016-7236 Microsoft Excel 2010 SP2, Excel for Mac 2011, Excel 2016 for Mac, and Excel Services on SharePoint Server 2010 SP2 allow remote attackers to execute arbitrary code via a crafted Office document, aka "...
HighCVSS 7.8
EPSS 20.7%
- Published
- Updated
- Exploit status
- No public exploit known
Description
Microsoft Excel 2010 SP2, Excel for Mac 2011, Excel 2016 for Mac, and Excel Services on SharePoint Server 2010 SP2 allow remote attackers to execute arbitrary code via a crafted Office document, aka "Microsoft Office Memory Corruption Vulnerability."
Affected products
| Product | Affected versions | Fixed in |
|---|---|---|
| Microsoft excel | = 2010-sp2 | No fix listed |
| Microsoft excel for mac | = 2011 | No fix listed |
| Microsoft excel for mac | = 2016 | No fix listed |
| Microsoft sharepoint server | = 2010-sp2 | No fix listed |
References
- 94025 vdb-entry
- 1037246 vdb-entry
- MS16-133 vendor-advisory
- 20161108 Microsoft Office Excel Use-after-Free Vulnerability third-party-advisory