#VU135 Memory corruption vulnerability


Published: 2016-07-14 | Updated: 2017-02-03

Vulnerability identifier: #VU135

Vulnerability risk: High

CVSSv3.1: 8.3 [CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:C/C:H/I:H/A:H/E:U/RL:O/RC:C]

CVE-ID: CVE-2016-3282

CWE-ID: CWE-119

Exploitation vector: Network

Exploit availability: No

Vulnerable software:
Microsoft Office
Client/Desktop applications / Office applications
Microsoft Office for Mac
Client/Desktop applications / Office applications
Microsoft Word
Client/Desktop applications / Office applications
Microsoft Word for Mac
Client/Desktop applications / Office applications
Microsoft Office Compatibility Pack
Client/Desktop applications / Office applications
Microsoft Office Web Apps
Client/Desktop applications / Office applications
Word Automation Services on Microsoft SharePoint Server
Server applications / Other server solutions
Office Online Server
Server applications / Other server solutions
Microsoft SharePoint Server
Server applications / Application servers

Vendor: Microsoft

Description

A remote attacker can execute arbitrary code on the target system.

The vulnerability exists due to an unknown error in Microsoft Word. A remote attacker can execute arbitrary code on the target system.

Successful exploitation of this vulnerability will allow a remote attacker to execute arbitrary commands, access files and perform any actions with privileges of the current user.


Mitigation

To resolve this vulnerability vendor recommends installing the following updates:

Microsoft Office 2007

Microsoft Word 2007 Service Pack 3

Microsoft Office 2010

Microsoft Office 2010 Service Pack 2 (32-bit editions)
Microsoft Office 2010 Service Pack 2 (64-bit editions)
Microsoft Word 2010 Service Pack 2 (32-bit editions)
Microsoft Word 2010 Service Pack 2 (64-bit editions)

Microsoft Office 2013

Microsoft Word 2013 Service Pack 1 (32-bit editions)
Microsoft Word 2013 Service Pack 1 (64-bit editions)

Microsoft Office 2013 RT

Use Windows Update to obtain the patch.

Microsoft Office 2016

Microsoft Word 2016 (32-bit edition)
Microsoft Word 2016 (64-bit edition)

Other Office Software

Microsoft Office Compatibility Pack Service Pack 3
Microsoft Word Viewer

Vulnerable software versions

Microsoft Office: 2007 - 2016

Microsoft Office for Mac: 2011 - 2016

Microsoft Word: 2007 Service Pack 3 - 2016

Microsoft Word for Mac: 2011 - 2016

Microsoft Office Compatibility Pack: Service Pack 3

Word Automation Services on Microsoft SharePoint Server: 2010 Service Pack 2 - 2013 Service Pack 1

Microsoft SharePoint Server: 2016

Microsoft Office Web Apps: 2010 Service Pack 2 - 2013 Service Pack 1

Office Online Server : 1.0


CPE

External links
http://technet.microsoft.com/en-us/library/security/MS16-088


Q & A

Can this vulnerability be exploited remotely?

Yes. This vulnerability can be exploited by a remote non-authenticated attacker via the Internet.

Is there known malware, which exploits this vulnerability?

No. We are not aware of malware exploiting this vulnerability.


Latest bulletins with this vulnerability