Microsoft Excel 2007 SP3, Excel 2010 SP2, Excel 2013 SP1, Excel 2013 RT SP1, Excel 2016, Office Compatibility Pack SP3, and Excel Viewer allow remote attackers to execute arbitrary code via a crafted document, aka "Microsoft Office Memory Corruption Vulnerability," a different vulnerability than CVE-2016-3381.
References
Link | Resource |
---|---|
http://www.securityfocus.com/bid/92801 | Third Party Advisory VDB Entry |
http://www.securitytracker.com/id/1036785 | Third Party Advisory VDB Entry |
https://docs.microsoft.com/en-us/security-updates/securitybulletins/2016/ms16-107 | |
https://medium.com/%40steventseeley/ms16-107-microsoft-office-excel-eof-record-type-confusion-remote-code-execution-vulnerability-1105d52764ff |
Configurations
Configuration 1 (hide)
|
History
07 Nov 2023, 02:32
Type | Values Removed | Values Added |
---|---|---|
References |
|
|
Information
Published : 2016-09-14 10:59
Updated : 2024-02-28 15:21
NVD link : CVE-2016-3363
Mitre link : CVE-2016-3363
CVE.ORG link : CVE-2016-3363
JSON object : View
Products Affected
microsoft
- office_compatibility_pack
- excel
- excel_viewer
CWE
CWE-119
Improper Restriction of Operations within the Bounds of a Memory Buffer