Microsoft Word 2007, Office 2010 SP2, Word 2010 SP2, Word for Mac 2011, Excel for Mac 2011, Word Viewer, Office Compatibility Pack SP3, Word Automation Services on SharePoint Server 2013 SP1, and Office Web Apps 2010 SP2 allow remote attackers to obtain sensitive information from process memory or cause a denial of service (out-of-bounds read) via a crafted Office document, aka "Microsoft Office Information Disclosure Vulnerability."

The Microsoft Office application installed on the remote macOS or Mac OS X host is missing a security update. It is, therefore, affected by multiple vulnerabilities :

  - Multiple remote code execution vulnerabilities exist     due to improper handling of objects in memory. An     unauthenticated, remote attacker can exploit these by     convincing a user to visit a specially crafted website     or open a specially crafted Office file, resulting in     the execution of arbitrary code in the context of the     current user. (CVE-2016-7213, CVE-2016-7228,     CVE-2016-7229, CVE-2016-7231, CVE-2016-7232,     CVE-2016-7234, CVE-2016-7235, CVE-2016-7236)

  - An information disclosure vulnerability exists due to an     out-of-bounds read error caused by an uninitialized     variable. An unauthenticated, remote attacker can exploit     this by convincing a user to open a specially crafted     Office file, resulting in the disclosure of memory     contents. (CVE-2016-7233)

The Microsoft Office application installed on the remote Windows host is missing a security update. It is, therefore, affected by multiple vulnerabilities :

  - Multiple remote code execution vulnerabilities exist     due to improper handling of objects in memory. An     unauthenticated, remote attacker can exploit these by     convincing a user to visit a specially crafted website     or open a specially crafted Office file, resulting in     the execution of arbitrary code in the context of the     current user. (CVE-2016-7213, CVE-2016-7228,     CVE-2016-7229, CVE-2016-7230, CVE-2016-7231,     CVE-2016-7232, CVE-2016-7234, CVE-2016-7235,     CVE-2016-7236, CVE-2016-7245)

  - An information disclosure vulnerability exists due to an     out-of-bounds read error caused by an uninitialized     variable. An unauthenticated, remote attacker can exploit     this by convincing a user to open a specially crafted     Office file, resulting in the disclosure of memory     contents. (CVE-2016-7233)

  - A denial of service vulnerability exists due to improper     handling of objects in memory. An unauthenticated,     remote attacker can exploit this by convincing a user to     open a specially crafted file, resulting in a crash of     the application. (CVE-2016-7244)

ID	Name	Product	Family	Type	Severity
94913	MS16-133: Security Update for Microsoft Office (3199168) (macOS)	Nessus	MacOS X Local Security Checks	Local	high
94634	MS16-133: Security Update for Microsoft Office (3199168)	Nessus	Windows : Microsoft Bulletins	Local	high

Detections

Analytics

CVE-2016-7233

medium

Tenable Plugins

high

high