How to Buy
This script is Copyright (C) 2013-2016 Tenable Network Security, Inc.
The Microsoft Office component installed on the remote host is affected
by multiple remote code execution vulnerabilities.
The remote Windows host is running a version of Microsoft Office or
Microsoft Office Compatibility Pack that is affected by multiple remote
code execution vulnerabilities. The vulnerabilities exist in the way
that Microsoft Word parses specially crafted files.
An attacker who successfully exploited these issues could take complete
control of an affected system and potentially execute remote code.
See also :
Microsoft has released a set of patches for Office 2003, 2007, and
Office Compatibility Pack.
Risk factor :
High / CVSS Base Score : 9.3
CVSS Temporal Score : 6.9
Public Exploit Available : false
Family: Windows : Microsoft Bulletins
Nessus Plugin ID: 70338 ()
Bugtraq ID: 6282762832
CVE ID: CVE-2013-3891CVE-2013-3892
Get Nessus Professional to scan unlimited IPs, run compliance checks & more
The cookie settings on this website are set to 'allow all cookies' to give you the very best website experience. If you continue without changing these settings, you consent to this - but if you want, you can opt out of all cookies by clicking below.