CVE-2016-7230

2016-11-1006:59:00

CWE-119

[email protected]

web.nvd.nist.gov

cve-2016-7230

microsoft

powerpoint

office

memory corruption

vulnerability

remote execution

7.8 High

CVSS3

Attack Vector

LOCAL

Attack Complexity

LOW

Privileges Required

NONE

User Interaction

REQUIRED

Scope

UNCHANGED

Confidentiality Impact

HIGH

Integrity Impact

HIGH

Availability Impact

HIGH

CVSS:3.0/AV:L/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H

9.3 High

CVSS2

Access Vector

NETWORK

Access Complexity

MEDIUM

Authentication

NONE

Confidentiality Impact

COMPLETE

Integrity Impact

COMPLETE

Availability Impact

COMPLETE

AV:N/AC:M/Au:N/C:C/I:C/A:C

0.7 High

EPSS

Percentile

98.0%

JSON

Microsoft PowerPoint 2010 SP2, PowerPoint Viewer, and Office Web Apps 2010 SP2 allow remote attackers to execute arbitrary code via a crafted Office document, aka “Microsoft Office Memory Corruption Vulnerability.”

CPENameOperatorVersion
microsoft:powerpoint_viewermicrosoft powerpoint viewereq*
microsoft:powerpointmicrosoft powerpointeq2010
microsoft:office_web_appsmicrosoft office web appseq2010

CPE	Name	Operator	Version
microsoft:powerpoint_viewer	microsoft powerpoint viewer	eq	*
microsoft:powerpoint	microsoft powerpoint	eq	2010
microsoft:office_web_apps	microsoft office web apps	eq	2010