CVE-2016-7291
HighSummary
Microsoft Word 2007 SP3, Office 2010 SP2, Word 2010 SP2, Office Compatibility Pack SP3, Word for Mac 2011, Word Automation Services on SharePoint Server 2010 SP2, and Office Web Apps 2010 SP2 allow remote attackers to obtain sensitive information from process memory or cause a denial of service (out-of-bounds read) via a crafted document.
Risk Assessment
This vulnerability may lead to the disclosure of sensitive organizational data or disruption of service, impacting the integrity and availability of systems.
Recommendation
It is recommended to update the software to the latest versions and implement appropriate security measures to minimize the risk associated with this vulnerability.
Other vulnerabilities in Microsoft Word 2007 SP3, Office 2010 SP2, Word 2010 SP2, Office Compatibility Pack SP3, Word for Mac 2011, Word Automation Services on SharePoint Server 2010 SP2, Office Web Apps 2010 SP2
See all- CVE-2016-7268High
Microsoft Word and other Office applications have a vulnerability that allows remote attackers to obtain sensitive information from process memory or cause a denial of service via a crafted document.
- CVE-2015-2469High
The vulnerability in Microsoft Word 2007 SP3, Office 2010 SP2, Word 2010 SP2, and Office for Mac 2011 allows remote attackers to execute arbitrary code via a crafted document.
Original NVD description (English source)
Microsoft Word 2007 SP3, Office 2010 SP2, Word 2010 SP2, Office Compatibility Pack SP3, Word for Mac 2011, Word Automation Services on SharePoint Server 2010 SP2, and Office Web Apps 2010 SP2 allow remote attackers to obtain sensitive information from process memory or cause a denial of service (out-of-bounds read) via a crafted document, aka "Microsoft Office Information Disclosure Vulnerability," a different vulnerability than CVE-2016-7290.