Microsoft Office 2007 SP3, Office 2010 SP2, Office 2013 SP1, Office 2013 RT SP1, Office 2016, Word for Mac 2011, Word 2016 for Mac, Word Viewer, Word Automation Services on SharePoint Server 2010 SP2, SharePoint Server 2013 SP1, Excel Automation Services on SharePoint Server 2013 SP1, Word Automation Services on SharePoint Server 2013 SP1, Office Web Apps 2010 SP2, and Office Web Apps Server 2013 SP1 allow remote attackers to execute arbitrary code via a crafted document, aka "Microsoft Office Memory Corruption Vulnerability."

The version of Microsoft Office installed on the remote Mac OS X host is affected by multiple remote code execution vulnerabilities due to improper handling of objects in memory. An unauthenticated, remote attacker can exploit these vulnerabilities by convincing a user to open a specially crafted Office file, resulting in the execution of arbitrary code in the context of the current user.

The Microsoft Office application installed on the remote Windows host is missing a security update. It is, therefore, affected by multiple vulnerabilities :

  - An information disclosure vulnerability exists in the     the Click-to-Run (C2R) components due to improper     handling of objects in memory. An authenticated, remote     attacker can exploit this, via a specially crafted     application, to obtain sensitive information and thereby     bypass the Address Space Layout Randomization (ASLR)     security feature. (CVE-2016-0137)

  - An information disclosure vulnerability exists due to     Visual Basic macros improperly exporting a user's private     key from the certificate store while saving a document.
    An unauthenticated, remote attacker can exploit this,     by convincing a user to provide the saved document, to     gain access to the user's private key. (CVE-2016-0141)

  - Multiple remote code execution vulnerabilities exist in     Microsoft Office software due to improper handling of     objects in memory. A remote attacker can exploit these,     by convincing a user to open a specially crafted Office     file, to execute arbitrary code in the context of the     current user. (CVE-2016-3357, CVE-2016-3358,     CVE-2016-3359, CVE-2016-3360, CVE-2016-3361,     CVE-2016-3362, CVE-2016-3363, CVE-2016-3364,     CVE-2016-3365, CVE-2016-3381)

  - A spoofing vulnerability exists in Microsoft Outlook due     to a failure to conform to RFC2046 and properly identify     the end of a MIME attachment. An unauthenticated, remote     attacker can exploit this, by convincing a user to open     a specially crafted email attachment, to cause antivirus     or antispam security features to fail. (CVE-2016-3366)

ID	Name	Product	Family	Severity
93532	MS16-107: Security Update for Microsoft Office (3185852) (Mac OS X)	Nessus	MacOS X Local Security Checks	high
93481	MS16-107: Security Update for Microsoft Office (3185852)	Nessus	Windows : Microsoft Bulletins	high

Detections

Analytics

CVE-2016-3357

high

Tenable Plugins

high

high