MS16-029 - K7 Labs

<< Back

CVE Number	Vulnerability	Product	Severity	Date
MS16-029	Security Update for Microsoft Office to Address Remote Code Execution (3141806)	Microsoft Office	Important	09-03-2016

Technical Information

Brief overview of the risk:
This security update resolves vulnerabilities in Microsoft Office. The most severe of the vulnerabilities could allow remote code execution if a user opens a specially crafted Microsoft Office file.

Detailed Information on the risk:

A security feature bypass vulnerability exists in Microsoft Office software due to an invalidly signed binary. An attacker who successfully exploited the vulnerability could use a similarly configured binary to host malicious code. A defender would then not be able to rely on a valid binary signature to differentiate between a known good and a malicious binary.

Further information on this exploit is available at : MS16-029

Microsoft Office 2007 Service Pack 3
Microsoft InfoPath 2007 Service Pack 3
Microsoft Word 2007 Service Pack 3
Microsoft Office 2010 Service Pack 2 (32-bit editions)
Microsoft Office 2010 Service Pack 2 (32-bit editions)
Microsoft Office 2010 Service Pack 2 (64-bit editions)
Microsoft InfoPath 2010 Service Pack 2 (32-bit editions)
Microsoft InfoPath 2010 Service Pack 2 (64-bit editions)
Microsoft Word 2010 Service Pack 2 (32-bit editions)
Microsoft Word 2010 Service Pack 2 (64-bit editions)
Microsoft Office 2013 Service Pack 1 (32-bit editions)
Microsoft InfoPath 2013 Service Pack 1 (32-bit editions)
Microsoft InfoPath 2013 Service Pack 1 (64-bit editions)
Microsoft Word 2013 Service Pack 1 (32-bit editions)
Microsoft Word 2013 Service Pack 1 (64-bit editions)
Microsoft Office 2016 (32-bit edition)
Microsoft Word 2016 (32-bit edition)
Microsoft Word 2016 (64-bit edition)
Microsoft Word for Mac 2011
Microsoft Word 2016 for Mac
Microsoft Office Compatibility Pack Service Pack 3
Microsoft Word Viewer

Technical Information

Affected Software