CVE-2016-7265
high · 7.1Microsoft Excel 2007 SP3, Excel 2010 SP2, Excel 2013 SP1, Excel 2013 RT SP1, Excel 2016, Office Compatibility Pack SP3, Excel Viewer, Excel Services on SharePoint Server 2007 SP3, and Excel Services on SharePoint Server 2010 SP2 allow remote attackers to obtain sensitive information from process memory or cause a denial of service (out-of-bounds read) via a crafted document, aka "Microsoft Office Information Disclosure Vulnerability."
7.1
CVSS
22.6%
EPSS (exploit prob.)
98th
EPSS percentile
2016-12-20
Published
CVSS:3.0/AV:L/AC:L/PR:N/UI:R/S:U/C:H/I:N/A:H
Weaknesses
CWE-125
Affected products
| Vendor | Product | Affected versions |
|---|---|---|
| microsoft | excel | 2007 |
| microsoft | excel | 2010 |
| microsoft | excel | 2013 |
| microsoft | excel | 2013 |
| microsoft | excel | 2016 |
| microsoft | excel_viewer | all versions |
| microsoft | office_compatibility_pack | all versions |
| microsoft | sharepoint_server | 2007 |
| microsoft | sharepoint_server | 2010 |
Check a specific version with /api/v1/cve/match.
References
- http://www.securityfocus.com/bid/94721
- http://www.securitytracker.com/id/1037441
- https://docs.microsoft.com/en-us/security-updates/securitybulletins/2016/ms16-148
- http://www.securityfocus.com/bid/94721
- http://www.securitytracker.com/id/1037441
- https://docs.microsoft.com/en-us/security-updates/securitybulletins/2016/ms16-148
Query this programmatically:
curl https://evil-db.io/api/v1/cve/CVE-2016-7265