Memory corruption vulnerability in Microsoft Excel in Microsoft products - CVE-2016-3284
Published: July 14, 2016 / Updated: February 6, 2017
Vulnerability details
A remote attacker can execute arbitrary code on the target system.
The vulnerability exists due to an unknown error in Microsoft Excel. A remote attacker can execute arbitrary code on the target system.
Successful exploitation of this vulnerability will allow a remote attacker to execute arbitrary commands, access files and perform any actions with privileges of the current user.Affected software
Microsoft Office Compatibility Pack
Microsoft Office
Microsoft Office for macOS
Microsoft Excel for macOS
How to mitigate CVE-2016-3284
To resolve this vulnerability vendor recommends installing the following updates:
Microsoft Office 2007
Microsoft Excel 2007 Service Pack 3
Microsoft Office 2010
Microsoft Excel 2010 Service Pack 2 (32-bit editions)
Microsoft Excel 2010 Service Pack 2 (64-bit editions)
Microsoft Office 2013
Microsoft Excel 2013 Service Pack 1 (32-bit editions)
Microsoft Excel 2013 Service Pack 1 (64-bit editions)
Microsoft Office 2013 RT
Use Windows Update to obtain the patch.
Microsoft Office 2016
Microsoft Excel 2016 (32-bit edition)
Microsoft Excel 2016 (64-bit edition)
Microsoft Office for Mac 2011
Microsoft Office 2016 for Mac
Other Office Software
Microsoft Office Compatibility Pack Service Pack 3
Microsoft Excel Viewer