high7.8Public exploit code
CVE-2016-3316
Microsoft Word 2013 SP1, 2013 RT SP1, 2016, and 2016 for Mac allow remote attackers to execute arbitrary code via a crafted file, aka "Microsoft Office Memory …
Public exploit code
Working exploit or proof of concept code has been published for this vulnerability. Treat unpatched systems as at risk.
- Microsoft Word 2013/2016 - sprmSdyaTop Denial of Service (MS16-099)2016-08-16 · dos · multiple · Verified
Impact
Microsoft Word 2013 SP1, 2013 RT SP1, 2016, and 2016 for Mac allow remote attackers to execute arbitrary code via a crafted file, aka "Microsoft Office Memory Corruption Vulnerability."
Affected products
| Vendor | Product | Affected versions |
|---|---|---|
| Microsoft | Word | Versions 2013, 2016 |
| Microsoft | Word For Mac | Version 2016 |
Weakness classification
References
- NVD record
- CVE.org record
- http://www.securityfocus.com/bid/92300
- http://www.securitytracker.com/id/1036559
- https://docs.microsoft.com/en-us/security-updates/securitybulletins/2016/ms16-099
- https://www.exploit-db.com/exploits/40238/
- http://www.securityfocus.com/bid/92300
- http://www.securitytracker.com/id/1036559
- https://docs.microsoft.com/en-us/security-updates/securitybulletins/2016/ms16-099
- https://www.exploit-db.com/exploits/40238/