CVE-2016-0054
HighSummary
A vulnerability in Microsoft Excel and related products allows remote attackers to execute arbitrary code via a crafted Office document. This affects multiple versions of Excel and Excel Services on SharePoint.
Risk Assessment
Attackers could exploit this vulnerability to remotely take control of the system, posing a serious threat to the organization's data security.
Recommendation
It is recommended to update all affected software versions to the latest security patches to minimize the risk of attack.
Other vulnerabilities in Microsoft Excel 2007 SP3, Excel 2010 SP2, Excel 2013 SP1, Excel 2013 RT SP1, Excel 2016, Excel for Mac 2011, Excel 2016 for Mac, Office Compatibility Pack SP3, Excel Viewer, Excel Services on SharePoint Server 2007 SP3, Excel Services on SharePoint Server 2010 SP2, Excel Services on SharePoint Server 2013 SP1, Office Web Apps 2010 SP2
See all- CVE-2016-7266High
Microsoft Excel versions 2007 SP3, 2010 SP2, 2013 SP1, 2016, and other related applications mishandle a registry check, allowing user-assisted remote attackers to execute arbitrary commands via crafted embedded content in a document.
- CVE-2016-7265High
Microsoft Excel and Excel services on SharePoint have a vulnerability that allows remote attackers to obtain sensitive information from process memory or cause a denial of service via a crafted document.
- CVE-2016-7229High
Microsoft Excel (in various versions) has a vulnerability that allows remote attackers to execute arbitrary code via a crafted Office document, known as 'Microsoft Office Memory Corruption Vulnerability.'
- CVE-2016-7228High
A vulnerability in Microsoft Excel allows remote attackers to execute arbitrary code via a crafted Office document. This affects multiple versions of Excel and the Office Compatibility Pack.
- CVE-2016-7213High
A vulnerability in Microsoft Excel and Office Compatibility Pack allows remote attackers to execute arbitrary code via a crafted Office document. This affects multiple versions of Excel and the compatibility pack.
- CVE-2016-3365High
Microsoft Excel and related services in various versions allow remote attackers to execute arbitrary code via a crafted document, known as 'Microsoft Office Memory Corruption Vulnerability'.
- CVE-2016-3363High
Microsoft Excel versions 2007 SP3, 2010 SP2, 2013 SP1, 2013 RT SP1, 2016, Office Compatibility Pack SP3, and Excel Viewer allow remote attackers to execute arbitrary code via a crafted document, known as 'Microsoft Office Memory Corruption Vulnerability.'
- CVE-2016-3362High
A vulnerability in Microsoft Excel and related products allows remote attackers to execute arbitrary code via a crafted document. This affects multiple versions of Excel and services related to SharePoint and Office Online.
- CVE-2016-3358High
A vulnerability in Microsoft Excel and related products allows remote attackers to execute arbitrary code via a crafted document. This affects multiple versions of Excel and SharePoint services.
- CVE-2016-3284High
Microsoft Excel (various versions) has a vulnerability that allows remote attackers to execute arbitrary code via a crafted Office document, known as 'Microsoft Office Memory Corruption Vulnerability.'
Original NVD description (English source)
Microsoft Excel 2007 SP3, Excel 2010 SP2, Excel 2013 SP1, Excel 2013 RT SP1, Excel 2016, Excel for Mac 2011, Excel 2016 for Mac, Office Compatibility Pack SP3, Excel Viewer, Excel Services on SharePoint Server 2007 SP3, Excel Services on SharePoint Server 2010 SP2, Excel Services on SharePoint Server 2013 SP1, and Office Web Apps 2010 SP2 allow remote attackers to execute arbitrary code via a crafted Office document, aka "Microsoft Office Memory Corruption Vulnerability."