Lucene search

[email protected]NVD:CVE-2016-7236

HistoryNov 10, 2016 - 6:59 a.m.

CVE-2016-7236

2016-11-1006:59:49

CWE-119

[email protected]

web.nvd.nist.gov

CVSS2

9.3

Attack Vector

NETWORK

Attack Complexity

MEDIUM

Authentication

NONE

Confidentiality Impact

COMPLETE

Integrity Impact

COMPLETE

Availability Impact

COMPLETE

AV:N/AC:M/Au:N/C:C/I:C/A:C

CVSS3

7.8

Attack Vector

LOCAL

Attack Complexity

LOW

Privileges Required

NONE

User Interaction

REQUIRED

Scope

UNCHANGED

Confidentiality Impact

HIGH

Integrity Impact

HIGH

Availability Impact

HIGH

CVSS:3.0/AV:L/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H

EPSS

0.486

Percentile

97.5%

JSON

Microsoft Excel 2010 SP2, Excel for Mac 2011, Excel 2016 for Mac, and Excel Services on SharePoint Server 2010 SP2 allow remote attackers to execute arbitrary code via a crafted Office document, aka “Microsoft Office Memory Corruption Vulnerability.”

Affected configurations

Nvd

Node

microsoftexcelMatch2010sp2

microsoftexcel_for_macMatch2011

microsoftexcel_for_macMatch2016

microsoftsharepoint_serverMatch2010sp2

VendorProductVersionCPE
microsoftexcel2010cpe:2.3:a:microsoft:excel:2010:sp2:*:*:*:*:*:*
microsoftexcel_for_mac2011cpe:2.3:a:microsoft:excel_for_mac:2011:*:*:*:*:*:*:*
microsoftexcel_for_mac2016cpe:2.3:a:microsoft:excel_for_mac:2016:*:*:*:*:*:*:*
microsoftsharepoint_server2010cpe:2.3:a:microsoft:sharepoint_server:2010:sp2:*:*:*:*:*:*

Vendor	Product	Version	CPE
microsoft	excel	2010	cpe:2.3:a:microsoft:excel:2010:sp2::::::
microsoft	excel_for_mac	2011	cpe:2.3:a:microsoft:excel_for_mac:2011:::::::*
microsoft	excel_for_mac	2016	cpe:2.3:a:microsoft:excel_for_mac:2016:::::::*
microsoft	sharepoint_server	2010	cpe:2.3:a:microsoft:sharepoint_server:2010:sp2::::::