HTTP: Microsoft Office CVE-2016-7230 Remote Code Execution

This signature detects an attempt to exploit a known vulnerability in Microsoft Office. A successfully exploitation of this issue could lead to remote code execution.

Extended Description

Microsoft PowerPoint 2010 SP2, PowerPoint Viewer, and Office Web Apps 2010 SP2 allow remote attackers to execute arbitrary code via a crafted Office document, aka "Microsoft Office Memory Corruption Vulnerability."

Affected Products

Microsoft powerpoint_viewer

References

CVE: CVE-2016-7230

Short Name
HTTP:STC:DL:CVE-2016-7230-RCE
Severity
Major
Recommended
True
Recommended Action
Drop
Category
HTTP
Keywords
CVE-2016-7230 Code Execution Microsoft Office Remote
Release Date
11/08/2016
Supported Platforms

srx-branch-12.3

srx-19.3

srx-branch-19.3

vsrx3bsd-19.2

srx-branch-19.4

vsrx-19.4

mx-12.3

mx-19.4

vmx-19.4

mx-19.3

vsrx3bsd-19.4

srx-19.4

vsrx-12.3

vmx-19.3

vsrx-19.2

srx-12.3

Sigpack Version
3590
False Positive
Unknown
Vendors

Microsoft

CVSS Score

9.3

Found a potential security threat?