CVE-2016-3359 — Improper Restriction of Operations within the Bounds of a Memory Buffer in Microsoft Excel

CWE-119 — Improper Restriction of Operations within the Bounds of a Memory Buffer5 documents5 sources
Severity
7.8HIGHNVD
EPSS
19.8%
top 4.55%
CISA KEV
Not in KEV
Exploit
No known exploits
Affected products
1
Microsoft Excel
Timeline
PublishedSep 14
Latest updateMay 14

Description

Microsoft Excel 2007 SP3, Excel 2010 SP2, Office Compatibility Pack SP3, and Excel Viewer allow remote attackers to execute arbitrary code via a crafted document, aka "Microsoft Office Memory Corruption Vulnerability."

CVSS vector

CVSS:3.0/AV:L/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:HExploitability: 1.8 | Impact: 5.9

Affected Packages1 packages

▶NVDmicrosoft/excel2007, 2010+1

🔴Vulnerability Details

2
GHSA
GHSA-4765-q3j7-rwqq: Microsoft Excel 2007 SP3, Excel 2010 SP2, Office Compatibility Pack SP3, and Excel Viewer allow remote attackers to execute arbitrary code via a craft↗2022-05-14
▶
CVEList
CVE-2016-3359: Microsoft Excel 2007 SP3, Excel 2010 SP2, Office Compatibility Pack SP3, and Excel Viewer allow remote attackers to execute arbitrary code via a craft↗2016-09-14
▶

📋Vendor Advisories

1
Microsoft
Microsoft Office Memory Corruption Vulnerability↗2016-09-13
▶

💬Community

1
Bugzilla
CVE-2014-9900 kernel: Info leak in uninitialized structure ethtool_wolinfo in ethtool_get_wol()↗2017-08-14
▶
CVE-2016-3359 — Microsoft Excel vulnerability | cvebase