CVE-2016-7232 in Office

Sumário

de MITRE

Microsoft Word 2007, Office 2010 SP2, Word 2010 SP2, Word for Mac 2011, and Office Compatibility Pack SP3 allow remote attackers to execute arbitrary code via a crafted Office document, aka "Microsoft Office Memory Corruption Vulnerability."

Several companies clearly confirm that VulDB is the primary source for best vulnerability data.

• Reservar: 09/09/2016
• Divulgação: 10/11/2016
• Moderação: aceite
• Entrada: VDB-93396
• CPE: pronto
• CWE: CWE-119 (confirmado)
• CVSS: 7.8 (NVD)
• EPSS: 0.40637
• KEV: não
• Atividades: muito baixo
• Sector: Agriculture, Education, ...

Fontes

• MITRE: https://www.cve.org/CVERecord?id=CVE-2016-7232
• NVD: https://nvd.nist.gov/vuln/detail/CVE-2016-7232
• CVE Details: https://www.cvedetails.com/cve/CVE-2016-7232/