The Microsoft Office application installed on the remote Windows host is missing a security update. It is, therefore, affected by multiple vulnerabilities :

  - Multiple remote code execution vulnerabilities exist     due to improper handling of objects in memory. An     unauthenticated, remote attacker can exploit these by     convincing a user to visit a specially crafted website     or open a specially crafted Office file, resulting in     the execution of arbitrary code in the context of the     current user. (CVE-2016-7213, CVE-2016-7228,     CVE-2016-7229, CVE-2016-7230, CVE-2016-7231,     CVE-2016-7232, CVE-2016-7234, CVE-2016-7235,     CVE-2016-7236, CVE-2016-7245)

  - An information disclosure vulnerability exists due to an     out-of-bounds read error caused by an uninitialized     variable. An unauthenticated, remote attacker can exploit     this by convincing a user to open a specially crafted     Office file, resulting in the disclosure of memory     contents. (CVE-2016-7233)

  - A denial of service vulnerability exists due to improper     handling of objects in memory. An unauthenticated,     remote attacker can exploit this by convincing a user to     open a specially crafted file, resulting in a crash of     the application. (CVE-2016-7244)

Detections

Analytics

MS16-133: Security Update for Microsoft Office (3199168)

high Nessus Plugin ID 94634

Version 1.9

Version 1.8

Version 1.9 Jan 19, 2026, 11:21 AM CVSSv2 score source (set to "CVE-2016-7245") Plugin Feed: 202601191121
Version 1.8 Feb 17, 2023, 12:01 PM IAVM reference Plugin Feed: 202302171201