PT-2016-1369 · Microsoft · Office Web Apps+7

Published 2016-03-08 · Updated 2018-10-12 · CVE-2016-0134

Positive Technologies (AI Summary)

CVSS v2.0

9.3

High

Base vector

AV:N/AC:M/Au:N/C:C/I:C/A:C

Name of the Vulnerable Software and Affected Versions Microsoft Word versions 2007 SP3 through 2016 Office versions 2010 SP2 through 2013 SP1 Word for Mac versions 2011 through 2016 Office Compatibility Pack version SP3 Word Viewer (affected versions not specified) Word Automation Services on SharePoint Server versions 2010 SP2 through 2013 SP1 Office Web Apps versions 2010 SP2 through 2013 SP1 Web Apps Server version 2013 SP1

Description The issue allows remote attackers to execute arbitrary code via a crafted Office document. This is caused by a buffer overflow in the Microsoft Word text editor, Microsoft SharePoint Server, Microsoft Office Compatibility Pack, and Office Web Apps Server. An attacker who successfully exploited the issue could run arbitrary code in the context of the current user. If the current user is logged on with administrative user rights, an attacker could take control of the affected system, then install programs, view, change, or delete data, or create new accounts with full user rights.

Recommendations For Microsoft Word 2007 SP3, update to a newer version to mitigate the risk. For Office 2010 SP2, update to a newer version to mitigate the risk. For Word 2010 SP2, update to a newer version to mitigate the risk. For Word 2013 SP1, update to a newer version to mitigate the risk. For Word 2013 RT SP1, update to a newer version to mitigate the risk. For Word 2016, update to a newer version to mitigate the risk. For Word for Mac 2011, update to a newer version to mitigate the risk. For Word 2016 for Mac, update to a newer version to mitigate the risk. For Office Compatibility Pack SP3, update to a newer version to mitigate the risk. For Word Viewer, at the moment, there is no information about a newer version that contains a fix for this issue. For Word Automation Services on SharePoint Server 2010 SP2 and 2013 SP1, update to a newer version to mitigate the risk. For Office Web Apps 2010 SP2 and Web Apps Server 2013 SP1, update to a newer version to mitigate the risk.

Fix

RCE

Buffer Overflow

Weakness Enumeration

CWE-119

Related Identifiers

BDU:2016-00668

CVE-2016-0134

Affected Products

Office Word

Office

Office Compatibility Pack

Office Web Apps

Sharepoint Server

Web Apps Server

Word Viewer

Word For Mac

References · 10

• https://bdu.fstec.ru/vul/2016-00668 · Security Note
• http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2016-0134 · Security Note
• https://nvd.nist.gov/vuln/detail/CVE-2016-0134 · Security Note
• https://osv.dev/vulnerability/CVE-2016-0134 · Vendor Advisory
• https://docs.microsoft.com/en-us/security-updates/securitybulletins/2016/ms16-029 · Vendor Advisory
• http://securityfocus.com/bid/84026 · Note
• http://technet.microsoft.com/security/bulletin/MS16-029 · Note
• http://securitytracker.com/id/1035207 · Note
• http://securitytracker.com/id/1035206 · Note
• http://technet.microsoft.com/library/security/ms16-029 · Note