CVE-2016-7268
HighSummary
Microsoft Word and other Office applications have a vulnerability that allows remote attackers to obtain sensitive information from process memory or cause a denial of service via a crafted document.
Risk Assessment
Attackers can exploit this vulnerability to steal data or destabilize the system, potentially leading to serious consequences for the organization.
Recommendation
It is recommended to update the software to the latest versions and monitor systems for suspicious activity related to document opening.
Other vulnerabilities in Microsoft Word 2007 SP3, Office 2010 SP2, Word 2010 SP2, Office Compatibility Pack SP3, Word Viewer, Word for Mac 2011, Word Automation Services on SharePoint Server 2010 SP2, Office Web Apps 2010 SP2
See all- CVE-2016-7291High
Microsoft Word 2007 SP3, Office 2010 SP2, Word 2010 SP2, Office Compatibility Pack SP3, Word for Mac 2011, Word Automation Services on SharePoint Server 2010 SP2, and Office Web Apps 2010 SP2 allow remote attackers to obtain sensitive information from process memory or cause a denial of service (out-of-bounds read) via a crafted document.
- CVE-2015-2469High
The vulnerability in Microsoft Word 2007 SP3, Office 2010 SP2, Word 2010 SP2, and Office for Mac 2011 allows remote attackers to execute arbitrary code via a crafted document.
Original NVD description (English source)
Microsoft Word 2007 SP3, Office 2010 SP2, Word 2010 SP2, Office Compatibility Pack SP3, Word Viewer, Word for Mac 2011, Word Automation Services on SharePoint Server 2010 SP2, and Office Web Apps 2010 SP2 allow remote attackers to obtain sensitive information from process memory or cause a denial of service (out-of-bounds read) via a crafted document, aka "Microsoft Office Information Disclosure Vulnerability."