CVE-2016-7244 — Improper Access Control in Microsoft Office

CWE-284 — Improper Access Control3 documents3 sources
Severity
5.5MEDIUMNVD
EPSS
16.7%
top 5.06%
CISA KEV
Not in KEV
Exploit
No known exploits
Affected products
2
Microsoft OfficeMsrc Microsoft Office 2007 Service Pack 3
Timeline
PublishedNov 10
Latest updateMay 14

Description

Microsoft Office 2007 SP3 allows remote attackers to cause a denial of service (application hang) via a crafted Office document, aka "Microsoft Office Denial of Service Vulnerability."

CVSS vector

CVSS:3.0/AV:L/AC:L/PR:N/UI:R/S:U/C:N/I:N/A:HExploitability: 1.8 | Impact: 3.6

Affected Packages2 packages

🔴Vulnerability Details

1
GHSA
GHSA-4rpx-hqr3-rp6m: Microsoft Office 2007 SP3 allows remote attackers to cause a denial of service (application hang) via a crafted Office document, aka "Microsoft Office↗2022-05-14
▶

📋Vendor Advisories

1
Microsoft
Microsoft Office Denial of Service Vulnerability↗2016-11-08
▶