HTTP: Microsoft Word CVE-2016-7233 Out-Of-Bounds Memory Read

An Out-of-bounds memory read vulnerability was identified in Microsoft Word. Successful exploitation of this issue could lead to information disclosure.

Extended Description

Microsoft Word 2007, Office 2010 SP2, Word 2010 SP2, Word for Mac 2011, Excel for Mac 2011, Word Viewer, Office Compatibility Pack SP3, Word Automation Services on SharePoint Server 2013 SP1, and Office Web Apps 2010 SP2 allow remote attackers to obtain sensitive information from process memory or cause a denial of service (out-of-bounds read) via a crafted Office document, aka "Microsoft Office Information Disclosure Vulnerability."

Affected Products

Microsoft word_automation_services

References

CVE: CVE-2016-7233

Short Name
HTTP:STC:CVE-2016-7233-OOB
Severity
Minor
Recommended
True
Recommended Action
Drop
Category
HTTP
Keywords
CVE-2016-7233 Memory Microsoft Out-Of-Bounds Read Word
Release Date
11/08/2016
Supported Platforms

srx-branch-12.3

srx-19.3

srx-branch-19.3

vsrx3bsd-19.2

srx-branch-19.4

vsrx-19.4

mx-12.3

mx-19.4

vmx-19.4

mx-19.3

vsrx3bsd-19.4

srx-19.4

vsrx-12.3

vmx-19.3

vsrx-19.2

srx-12.3

Sigpack Version
3590
False Positive
Unknown
Vendors

Microsoft

CVSS Score

4.3

Found a potential security threat?