MEDIUM · 6.5

CVE-2016-7233

Microsoft Word 2007, Office 2010 SP2, Word 2010 SP2, Word for Mac 2011, Excel for Mac 2011, Word Viewer, Office Compatibility Pack SP3, Word Automation Services on SharePoint Server 2013 SP1, and Offi...

Vulnerability Description

Microsoft Word 2007, Office 2010 SP2, Word 2010 SP2, Word for Mac 2011, Excel for Mac 2011, Word Viewer, Office Compatibility Pack SP3, Word Automation Services on SharePoint Server 2013 SP1, and Office Web Apps 2010 SP2 allow remote attackers to obtain sensitive information from process memory or cause a denial of service (out-of-bounds read) via a crafted Office document, aka "Microsoft Office Information Disclosure Vulnerability."

CVSS Score

6.5

MEDIUM

CVSS:3.0/AV:N/AC:L/PR:N/UI:R/S:U/C:H/I:N/A:N
Attack Vector
NETWORK
Attack Complexity
LOW
Privileges Required
NONE
User Interaction
REQUIRED
Scope
UNCHANGED
Confidentiality
HIGH
Integrity
NONE
Availability
NONE

Affected Products

VendorProductVersions
MicrosoftExcel For Mac2011
MicrosoftOffice2010
MicrosoftOffice Compatibility PackAll versions
MicrosoftOffice Web Apps2010
MicrosoftSharepoint Server2013
MicrosoftWord2007
MicrosoftWord Automation Services-
MicrosoftWord For Mac2011
MicrosoftWord Viewer-

Related Weaknesses (CWE)

References

FAQ

What is CVE-2016-7233?

CVE-2016-7233 is a vulnerability with a CVSS score of 6.5 (MEDIUM). Microsoft Word 2007, Office 2010 SP2, Word 2010 SP2, Word for Mac 2011, Excel for Mac 2011, Word Viewer, Office Compatibility Pack SP3, Word Automation Services on SharePoint Server 2013 SP1, and Offi...

How severe is CVE-2016-7233?

CVE-2016-7233 has been rated MEDIUM with a CVSS base score of 6.5/10. Review the CVSS metrics above for detailed severity breakdown.

Is there a patch for CVE-2016-7233?

Check the references section above for vendor advisories and patch information. Affected products include: Microsoft Excel For Mac, Microsoft Office, Microsoft Office Compatibility Pack, Microsoft Office Web Apps, Microsoft Sharepoint Server.