CVE-2016-0136
high · 7.8Microsoft Excel 2007 SP3, Excel 2010 SP2, Office Compatibility Pack SP3, Excel Services on SharePoint Server 2007 SP3, and Excel Services on SharePoint Server 2010 SP2 allow remote attackers to execute arbitrary code via a crafted Office document, aka "Microsoft Office Memory Corruption Vulnerability."
7.8
CVSS
20.7%
EPSS (exploit prob.)
97th
EPSS percentile
2016-04-12
Published
CVSS:3.0/AV:L/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H
Weaknesses
CWE-119
Affected products
| Vendor | Product | Affected versions |
|---|---|---|
| microsoft | excel | 2007 |
| microsoft | excel | 2010 |
| microsoft | office_compatibility_pack | all versions |
| microsoft | sharepoint_designer | 2007 |
| microsoft | sharepoint_foundation | 2010 |
Check a specific version with /api/v1/cve/match.
References
- http://www.securitytracker.com/id/1035524
- http://www.securitytracker.com/id/1035525
- https://docs.microsoft.com/en-us/security-updates/securitybulletins/2016/ms16-042
- https://www.verisign.com/en_US/security-services/security-intelligence/vulnerability-reports/articles/index.xhtml?id=1224
- http://www.securitytracker.com/id/1035524
- http://www.securitytracker.com/id/1035525
- https://docs.microsoft.com/en-us/security-updates/securitybulletins/2016/ms16-042
- https://www.verisign.com/en_US/security-services/security-intelligence/vulnerability-reports/articles/index.xhtml?id=1224
Query this programmatically:
curl https://evil-db.io/api/v1/cve/CVE-2016-0136