HTTP: Microsoft Office CVE-2016-0183 Information Disclosure
This signature detects attempts to exploit a known vulnerability against Microsoft Office. A successful attack can lead to information disclosure.
Extended Description
The Windows font library in Microsoft Office 2010 SP2, Word 2010 SP2, Word Automation Services on SharePoint Server 2010 SP2, and Office Web Apps 2010 SP2 allows remote attackers to execute arbitrary code via a crafted embedded font, aka "Microsoft Office Graphics RCE Vulnerability."
Affected Products
Microsoft sharepoint_server
References
CVE: CVE-2016-0183
Short Name
HTTP:STC:DL:CVE-2016-0183-ID
Severity
Minor
Recommended
True
Recommended Action
Drop
Category
HTTP
Keywords
CVE-2016-0183 Disclosure Information Microsoft Office
Release Date
05/10/2016
Supported Platforms
srx-branch-12.3
srx-19.3
srx-branch-19.3
vsrx3bsd-19.2
srx-branch-19.4
vsrx-19.4
mx-12.3
mx-19.4
vmx-19.4
mx-19.3
vsrx3bsd-19.4
srx-19.4
vsrx-12.3
vmx-19.3
vsrx-19.2
srx-12.3
Sigpack Version
3590
False Positive
Unknown
Vendors
Microsoft
CVSS Score
9.3