Back to feed
EUVD-2016-8147 · Published Dec 20, 2016
Microsoft Word 2007 SP3, Office 2010 SP2, Word 2010 SP2, Office Compatibility Pack SP3, Word for Mac 2011, Word Automation Services on SharePoint Server 2010 SP2, and Office Web Apps 2010 SP2 allow remote attackers to obtain sensitive information from process memory or cause a denial of service (out-of-bounds read) via a crafted document, aka "Microsoft Office Information Disclosure Vulnerability," a different vulnerability than CVE-2016-7290.
Technologies
Microsoft WordMicrosoft OfficeMicrosoft Word For MacMicrosoft Word Automation ServicesMicrosoft Office Compatibility PackMicrosoft Office Web AppsMicrosoft Sharepoint Server
Weaknesses
CWE-125
CVSS scores
- v3.07.1
CVSS:3.0/AV:L/AC:L/PR:N/UI:R/S:U/C:H/I:N/A:H - v2.05.8
AV:N/AC:M/Au:N/C:P/I:N/A:P
MITRE ATT&CK
InferredWhere this vulnerability fits in an attack
Initial Access
References
Potentially impacted assets
See if this affects your attack surface
