Lucene search
+L
Catalog
Vendors
Products
Timeline
Vulnerabilities
Sources
Documentation
Blog
Glossary
FAQ
Brand assets
Assessment
Agents dashboard
Agent Scanning
API Scanning
Assessment API
Alerts
Email notifications
Webhook notifications
Alerts API
SBOM package analysis
API Reference
Settings
Sign in

Microsoft Office Suite Multiple Vulnerabilities (3199168)

🗓️ 09 Nov 2016 00:00:00Reported by Copyright (C) 2016 Greenbone AGType 
openvas
 openvas🔗 plugins.openvas.org👁 98 Views

Microsoft Office Suite Multiple Vulnerabilities (3199168). Multiple flaws exist as Office software fails to properly handle objects in memory and reads out of bound memory due to an uninitialized variable. Successful exploitation allows remote attackers to run arbitrary code, gain access to sensitive information, and cause Office to stop responding. Affected versions include Microsoft Office 2007 Service Pack 3, Microsoft Office 2010 Service Pack 2, Microsoft Office 2013 Service Pack 1, and Microsoft Office 2016. Vendor has released updates

Related
Refs
Code
ReporterTitlePublishedViews
Family
bdu_fstec
BDU FSTEC		The vulnerability of Microsoft Word, the Microsoft Office Compatibility Pack, the Microsoft Office programs, and the Microsoft Excel spreadsheet editors allow a perpetrator to execute arbitrary code.
8 Dec 201600:00
–bdu_fstec
bdu_fstec
BDU FSTEC		Vulnerability of Microsoft Word, the Microsoft Office Web Apps suite, the Microsoft Office Compatibility Pack, the Microsoft Office suite, the Microsoft SharePoint Server corporate application suite, and the Microsoft Excel spreadsheet editor, allowing a perpetrator to execute arbitrary code.
8 Dec 201600:00
–bdu_fstec
bdu_fstec
BDU FSTEC		Vulnerability of the Microsoft Office package, the Microsoft SharePoint Server corporate application package, the Word Viewer software for reading doc files, the Microsoft Office Web Apps package, the Microsoft Word text editor, the Microsoft Excel spreadsheet editor, and the Microsoft Office Compatibility Pack, which allows a perpetrator to cause service interruptions or obtain confidential information from process memory.
8 Dec 201600:00
–bdu_fstec
bdu_fstec
BDU FSTEC		The vulnerability of the Microsoft Office Compatibility Pack, the Microsoft Word text editor, and the Microsoft Office software suite allows a perpetrator to execute arbitrary code.
8 Dec 201600:00
–bdu_fstec
bdu_fstec
BDU FSTEC		The vulnerability of the Microsoft Office software package, which allows a hacker to execute arbitrary code.
15 Dec 201600:00
–bdu_fstec
bdu_fstec
BDU FSTEC		The vulnerability of the Microsoft Office software package, which allows a hacker to trigger a service failure
15 Dec 201600:00
–bdu_fstec
cnvd
CNVD		Microsoft Office Memory Corruption Vulnerability (CNVD-2016-10940)
9 Nov 201600:00
–cnvd
cnvd
CNVD		Microsoft Office Information Disclosure Vulnerability (CNVD-2016-10965)
9 Nov 201600:00
–cnvd
cnvd
CNVD		Microsoft Office Memory Corruption Vulnerability (CNVD-2016-10966)
9 Nov 201600:00
–cnvd
cnvd
CNVD		Microsoft Office Memory Corruption Vulnerability (CNVD-2016-10973)
9 Nov 201600:00
–cnvd
Rows per page
# SPDX-FileCopyrightText: 2016 Greenbone AG
# Some text descriptions might be excerpted from (a) referenced
# source(s), and are Copyright (C) by the respective right holder(s).
#
# SPDX-License-Identifier: GPL-2.0-only

if(description)
{
  script_oid("1.3.6.1.4.1.25623.1.0.809718");
  script_version("2026-04-28T06:28:06+0000");
  script_cve_id("CVE-2016-7232", "CVE-2016-7244", "CVE-2016-7245", "CVE-2016-7233",
                "CVE-2016-7234", "CVE-2016-7235");
  script_tag(name:"cvss_base", value:"9.3");
  script_tag(name:"cvss_base_vector", value:"AV:N/AC:M/Au:N/C:C/I:C/A:C");
  script_tag(name:"last_modification", value:"2026-04-28 06:28:06 +0000 (Tue, 28 Apr 2026)");
  script_tag(name:"severity_vector", value:"CVSS:3.0/AV:L/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H");
  script_tag(name:"severity_origin", value:"NVD");
  script_tag(name:"severity_date", value:"2018-10-12 22:14:00 +0000 (Fri, 12 Oct 2018)");
  script_tag(name:"creation_date", value:"2016-11-09 11:41:38 +0530 (Wed, 09 Nov 2016)");
  script_tag(name:"qod_type", value:"executable_version");
  script_name("Microsoft Office Suite Multiple Vulnerabilities (3199168)");

  script_tag(name:"summary", value:"This host is missing an important
  update according to Microsoft Bulletin MS16-133.");

  script_tag(name:"vuldetect", value:"Checks if a vulnerable version is present on the target host.");

  script_tag(name:"insight", value:"Multiple flaws exist as,

  - Office software fails to properly handle objects in memory.

  - Office or Word reads out of bound memory due to an uninitialized variable.");

  script_tag(name:"impact", value:"Successful exploitation will allow remote
  attackers to run arbitrary code in the context of the current user, gain access
  to potentially sensitive information and cause Office to stop responding.");

  script_tag(name:"affected", value:"- Microsoft Office 2007 Service Pack 3

  - Microsoft Office 2010 Service Pack 2

  - Microsoft Office 2013 Service Pack 1

  - Microsoft Office 2016");

  script_tag(name:"solution", value:"The vendor has released updates. Please see the references for more information.");

  script_tag(name:"solution_type", value:"VendorFix");

  script_xref(name:"URL", value:"https://support.microsoft.com/en-us/kb/3127951");
  script_xref(name:"URL", value:"http://www.securityfocus.com/bid/94005");
  script_xref(name:"URL", value:"http://www.securityfocus.com/bid/94022");
  script_xref(name:"URL", value:"http://www.securityfocus.com/bid/94026");
  script_xref(name:"URL", value:"http://www.securityfocus.com/bid/94020");
  script_xref(name:"URL", value:"http://www.securityfocus.com/bid/94031");
  script_xref(name:"URL", value:"http://www.securityfocus.com/bid/94029");
  script_xref(name:"URL", value:"https://support.microsoft.com/en-us/kb/3118396");
  script_xref(name:"URL", value:"https://support.microsoft.com/en-us/kb/2986253");
  script_xref(name:"URL", value:"https://support.microsoft.com/en-us/kb/3115120");
  script_xref(name:"URL", value:"https://support.microsoft.com/en-us/kb/3115153");
  script_xref(name:"URL", value:"https://support.microsoft.com/en-us/kb/3115135");
  script_xref(name:"URL", value:"https://technet.microsoft.com/library/security/MS16-133");

  script_category(ACT_GATHER_INFO);
  script_copyright("Copyright (C) 2016 Greenbone AG");
  script_family("Windows : Microsoft Bulletins");
  script_dependencies("secpod_office_products_version_900032.nasl");
  script_mandatory_keys("MS/Office/Ver");
  script_require_ports(139, 445);
  exit(0);
}

include("smb_nt.inc");
include("secpod_reg.inc");
include("version_func.inc");
include("secpod_smb_func.inc");

## MS Office
offVer = get_kb_item("MS/Office/Ver");
if(!offVer){
  exit(0);
}

path = registry_get_sz(key:"SOFTWARE\Microsoft\Windows\CurrentVersion",
                            item:"CommonFilesDir");
if(!path){
  exit(0);
}

##https://support.microsoft.com/en-us/kb/3127951
##File information not available

#https://support.microsoft.com/en-us/kb/3118396
if(offVer =~ "^12\..*")
{
  offPath = path + "\Microsoft Shared\Office12" ;

  offexeVer = fetch_file_version(sysPath:offPath, file_name:"Mso.dll");
  if(offexeVer)
  {
    if(version_in_range(version:offexeVer, test_version:"12.0", test_version2:"12.0.6759.4999"))
    {
      report = 'File checked:     ' + offPath + "\Mso.dll" + '\n' +
               'File version:     ' + offexeVer  + '\n' +
               'Vulnerable range: ' + "12.0 - 12.0.6759.4999" + '\n' ;
      security_message(data:report);
      exit(0);
    }
  }
}

## https://support.microsoft.com/en-us/kb/2986253
## MS Office 2007
if(offVer =~ "^12.*")
{
  dllPath = registry_get_sz(key:"SOFTWARE\Microsoft\Windows\CurrentVersion",
                item:"CommonFilesDir");
  if(dllPath)
  {
    dllVer6 = fetch_file_version(sysPath:dllPath, file_name:"Microsoft Shared\VBA\VBA6\VBE6.DLL");
    if(dllVer6)
    {
      if(version_is_less(version:dllVer6, test_version:"6.5.10.57"))
      {
        report = 'File checked:     ' + dllPath + "Microsoft Shared\VBA\VBA6\VBE6.DLL" + '\n' +
                 'File version:     ' + dllVer6  + '\n' +
                 'Vulnerable range: ' + "Less than 6.5.10.57" + '\n' ;
        security_message(data:report);
        exit(0);
      }
    }
  }
}

##https://support.microsoft.com/en-us/kb/3115120
## MS Office 2010
if(offVer =~ "^14.*")
{
  dllPath = registry_get_sz(key:"SOFTWARE\Microsoft\Windows\CurrentVersion",
                item:"CommonFilesDir");
  if(dllPath)
  {
    vbVer = fetch_file_version(sysPath:dllPath, file_name:"Microsoft Shared\VBA\VBA7\VBE7.DLL");
    if(vbVer)
    {
      if(version_is_less(version:vbVer, test_version:"7.0.16.40"))
      {
        report = 'File checked:     ' + dllPath + "Microsoft Shared\VBA\VBA7\VBE7.DLL" + '\n' +
                 'File version:     ' + vbVer  + '\n' +
                 'Vulnerable range: ' + "Less than 7.0.16.40" + '\n' ;
        security_message(data:report);
        exit(0);
      }
    }
  }
}

##https://support.microsoft.com/en-us/kb/3115153
## MS Office 2013
if(offVer =~ "^15.*")
{
  dllPath = registry_get_sz(key:"SOFTWARE\Microsoft\Windows\CurrentVersion",
                item:"CommonFilesDir");

  if(dllPath)
  {
    vbVer = fetch_file_version(sysPath:dllPath, file_name:"Microsoft Shared\VBA\VBA7.1\VBEUI.DLL");
    if(vbVer)
    {
      if(version_is_less(version:vbVer, test_version:"7.1.15.4663"))
      {
        report = 'File checked:     ' + dllPath + "\Microsoft Shared\VBA\VBA7.1\VBEUI.DLL" + '\n' +
                 'File version:     ' + vbVer  + '\n' +
                 'Vulnerable range: ' + "Less than 7.1.15.4663" + '\n' ;
        security_message(data:report);
        exit(0);
      }
    }
  }
}

##https://support.microsoft.com/en-us/kb/3115135
## MS Office 2016
if(offVer =~ "^16.*")
{
  dllPath = registry_get_sz(key:"SOFTWARE\Microsoft\Windows\CurrentVersion",
                item:"CommonFilesDir");

  if(dllPath)
  {
    path = registry_get_sz(key:"SOFTWARE\Microsoft\Windows\CurrentVersion",
                              item:"ProgramFilesDir");
    if(path)
    {
      ##For x86 based installation
      ##To Do, Check path for 64bit installation and update path here
      vbPath = path + "\Microsoft Office\root\VFS\ProgramFilesCommonX86\Microsoft Shared\VBA\VBA7.1\";
      vbVer = fetch_file_version(sysPath:vbPath, file_name:"VBE7.DLL");
      if(vbVer)
      {
        if(version_is_less(version:vbVer, test_version:"7.1.10.56"))
        {
          report = 'File checked:     ' + vbPath + "VBE7.DLL" + '\n' +
                   'File version:     ' + vbVer  + '\n' +
                   'Vulnerable range: ' + "Less than 7.1.10.56" + '\n' ;
          security_message(data:report);
          exit(0);
        }
      }
    }
  }
}

Data

Build on a solid foundation with Vulners data

We provide the essential building blocks for cybersecurity solutions with comprehensive, structured, and constantly updated vulnerability and exploits data

Api

Power your application with Vulners API

The Vulners REST API offers reliable, high-performance access to vulnerability intelligence, with 99.9% SLA uptime and CDN-backed data delivery for seamless global access

App

Assess and manage vulnerabilities with Vulners tools

Built on top of Vulners' database and SDK, end-user solutions give security professionals and developers lightweight and powerful tools for vulnerability remediation

Book a live demo
28 Apr 2026 00:00Current
6.1Medium risk
Vulners AI Score6.1
CVSS 37.8
CVSS 29.3
EPSS0.24859
microsoft officevulnerabilitiesremote attackersarbitrary codesensitive informationmicrosoft office 2007microsoft office 2010microsoft office 2013microsoft office 2016updates
98