| CVE Number | Vulnerability | Product | Severity | Date |
|---|---|---|---|---|
| MS16-004 | Security Update for Microsoft Office to Address Remote Code Execution (3124585) | Microsoft Office | Critical | 13-01-2016 |
Technical Information
Brief overview of the risk:
This security update resolves vulnerabilities in Microsoft Office. The most severe of the vulnerabilities could allow remote code execution if a user opens a specially crafted Microsoft Office file. An attacker who successfully exploited the vulnerabilities could run arbitrary code in the context of the current user.
Detailed Information on the risk:
Multiple remote code execution vulnerabilities exist in Microsoft Office software when the Office software fails to properly handle objects in memory. An attacker who successfully exploited these vulnerabilities could run arbitrary code in the context of the current user. If the current user is logged on with administrative user rights, an attacker could take control of the affected system.
Microsoft Office 2007 Service Pack 3Further information on this exploit is available at : MS16-004
Microsoft Office 2010 Service Pack 2 (32-bit editions)
Microsoft Office 2010 Service Pack 2 (64-bit editions)
Microsoft Word 2016 for Mac
Microsoft PowerPoint 2016 for Mac
Microsoft Excel 2016 for Mac
Affected Software
Microsoft Office 2007 Service Pack 3Microsoft Office 2010 Service Pack 2 (32-bit editions)
Microsoft Office 2010 Service Pack 2 (64-bit editions)
Microsoft Word 2016 for Mac
Microsoft PowerPoint 2016 for Mac
Microsoft Excel 2016 for Mac