CVE-2016-7264
HighSummary
Microsoft Excel 2007 SP3, Office Compatibility Pack SP3, Excel Viewer, Excel for Mac 2011, and Excel 2016 for Mac have a vulnerability that allows remote attackers to obtain sensitive information from process memory or cause a denial of service (out-of-bounds read) via a crafted document.
Risk Assessment
This vulnerability may lead to the disclosure of confidential data of the organization or disrupt system operations, affecting business continuity.
Recommendation
It is recommended to update the software to the latest versions and monitor documents opened in Excel to minimize risk.
Other vulnerabilities in Microsoft Excel 2007 SP3, Office Compatibility Pack SP3, Excel Viewer, Excel for Mac 2011, Excel 2016 for Mac
See all- CVE-2017-0006High
The vulnerability in Microsoft Excel 2007 SP3, Office Compatibility Pack SP3, Excel Viewer, and Excel Services on SharePoint Server 2007 SP3 allows remote attackers to execute arbitrary code or cause a denial of service via a crafted document, known as 'Microsoft Office Memory Corruption Vulnerability.'
- CVE-2015-6177High
Microsoft Excel 2007 SP3, Office Compatibility Pack SP3, and Excel Viewer have a vulnerability that allows remote attackers to execute arbitrary code via a crafted Office document, known as 'Microsoft Office Memory Corruption Vulnerability.'
Original NVD description (English source)
Microsoft Excel 2007 SP3, Office Compatibility Pack SP3, Excel Viewer, Excel for Mac 2011, and Excel 2016 for Mac allow remote attackers to obtain sensitive information from process memory or cause a denial of service (out-of-bounds read) via a crafted document, aka "Microsoft Office Information Disclosure Vulnerability."