CVEvulnerability
CVE-2016-3279
5.5 MEDIUM
Official page ↗
- Status
- Modified
- Published
- 2016-07-13
- Last modified
- 2026-06-17
- Assigner
- [email protected]
- CVSS 3.0 ([email protected])
- 5.5 MEDIUM — CVSS:3.0/AV:L/AC:L/PR:N/UI:R/S:U/C:N/I:H/A:N
- CVSS 2.0 ([email protected])
- 4.3 MEDIUM — AV:N/AC:M/Au:N/C:N/I:P/A:N
- Weaknesses
- CWE-254
Description
Microsoft Office 2010 SP2, Excel 2010 SP2, PowerPoint 2010 SP2, Word 2010 SP2, Excel 2013 SP1, PowerPoint 2013 SP1, Word 2013 SP1, Excel 2013 RT SP1, PowerPoint 2013 RT SP1, Word 2013 RT SP1, Excel 2016, Word 2016, Word Automation Services on SharePoint Server 2010 SP2, and Office Web Apps 2010 SP2 allow remote attackers to execute arbitrary code via a crafted XLA file, aka "Microsoft Office Remote Code Execution Vulnerability."
Affected configurations
• microsoft excel 2010
• microsoft excel 2013
• microsoft excel 2016
• microsoft excel rt 2013
• microsoft office 2010
• microsoft office web apps 2010
• microsoft powerpoint 2010
• microsoft powerpoint 2013
• microsoft powerpoint rt 2013
• microsoft sharepoint server 2010
• microsoft word 2010
• microsoft word 2013
• microsoft word 2016
• microsoft word rt 2013
Related
Weakness · not in database (1)
References
- http://www.securityfocus.com/bid/91587 www.securityfocus.com
- http://www.securitytracker.com/id/1036274 www.securitytracker.com
- http://www.securitytracker.com/id/1036275 www.securitytracker.com
- https://docs.microsoft.com/en-us/security-updates/securitybulletins/2016/ms16-088 docs.microsoft.com
- http://www.securityfocus.com/bid/91587 www.securityfocus.com
- http://www.securitytracker.com/id/1036274 www.securitytracker.com
- http://www.securitytracker.com/id/1036275 www.securitytracker.com
- https://docs.microsoft.com/en-us/security-updates/securitybulletins/2016/ms16-088 docs.microsoft.com