CVE-2016-7265 — Out-of-bounds Read in Microsoft Excel

CWE-125 — Out-of-bounds Read4 documents4 sources
Severity
7.1HIGHNVD
EPSS
10.3%
top 6.82%
CISA KEV
Not in KEV
Exploit
No known exploits
Affected products
2
Microsoft ExcelMicrosoft Sharepoint Server
Timeline
PublishedDec 20
Latest updateMay 14

Description

Microsoft Excel 2007 SP3, Excel 2010 SP2, Excel 2013 SP1, Excel 2013 RT SP1, Excel 2016, Office Compatibility Pack SP3, Excel Viewer, Excel Services on SharePoint Server 2007 SP3, and Excel Services on SharePoint Server 2010 SP2 allow remote attackers to obtain sensitive information from process memory or cause a denial of service (out-of-bounds read) via a crafted document, aka "Microsoft Office Information Disclosure Vulnerability."

CVSS vector

CVSS:3.0/AV:L/AC:L/PR:N/UI:R/S:U/C:H/I:N/A:HExploitability: 1.8 | Impact: 5.2

Affected Packages2 packages

▶NVDmicrosoft/excel4 versions+3
▶NVDmicrosoft/sharepoint_server2007, 2010+1

🔴Vulnerability Details

2
GHSA
GHSA-46hr-q4hp-w8v2: Microsoft Excel 2007 SP3, Excel 2010 SP2, Excel 2013 SP1, Excel 2013 RT SP1, Excel 2016, Office Compatibility Pack SP3, Excel Viewer, Excel Services o↗2022-05-14
▶
CVEList
CVE-2016-7265: Microsoft Excel 2007 SP3, Excel 2010 SP2, Excel 2013 SP1, Excel 2013 RT SP1, Excel 2016, Office Compatibility Pack SP3, Excel Viewer, Excel Services o↗2016-12-20
▶

📋Vendor Advisories

1
Microsoft
Microsoft Excel Information Disclosure Vulnerability↗2016-12-13
▶
CVE-2016-7265 — Out-of-bounds Read in Microsoft Excel | cvebase