HTTP: Microsoft Office CVE-2016-3318 Remote Code Execution

This signature detects an attempt to exploit a known Vulnerability in the Microsoft Office. Successful exploitation could allow an attacker to execute arbitrary code into the application's context.

Extended Description

Microsoft Office 2007 SP3, 2010 SP2, 2013 SP1, and 2013 RT SP1 allow remote attackers to execute arbitrary code via a crafted file, aka "Graphics Component Memory Corruption Vulnerability."

Affected Products

Microsoft office

References

CVE: CVE-2016-3318

Short Name
HTTP:STC:DL:CVE-2016-3318-RCE
Severity
Major
Recommended
True
Recommended Action
Drop
Category
HTTP
Keywords
CVE-2016-3318 Code Execution Microsoft Office Remote
Release Date
08/09/2016
Supported Platforms

srx-branch-12.3

srx-19.3

srx-branch-19.3

vsrx3bsd-19.2

srx-branch-19.4

vsrx-19.4

mx-12.3

mx-19.4

vmx-19.4

mx-19.3

vsrx3bsd-19.4

srx-19.4

vsrx-12.3

vmx-19.3

vsrx-19.2

srx-12.3

Sigpack Version
3712
False Positive
Unknown
Vendors

Microsoft

CVSS Score

9.3

Found a potential security threat?