PT-2016-2170 · Microsoft · Office+6

Published 2016-06-14 · Updated 2018-10-12 · CVE-2016-3234

Positive Technologies (AI Summary)

CVSS v3.1

5.5

Medium

Base vector

AV:L/AC:L/PR:N/UI:R/S:U/C:H/I:N/A:N

Name of the Vulnerable Software and Affected Versions Microsoft Word versions 2007 SP3 Office versions 2010 SP2 Word versions 2010 SP2 Office Compatibility Pack versions SP3 Word Viewer Word Automation Services on SharePoint Server versions 2010 SP2, 2013 SP1 Office Web Apps versions 2010 SP2 Office Web Apps Server versions 2013 SP1

Description The issue allows remote attackers to obtain sensitive information from process memory via a crafted Office document. An attacker who exploited the vulnerability could use the information to compromise the user’s computer or data. To exploit the issue, an attacker could craft a special document file, and then convince the victim to open it. An attacker must know the memory address location where the object was created.

Recommendations For Microsoft Word 2007 SP3, update to a newer version to mitigate the risk. For Office 2010 SP2, update to a newer version to mitigate the risk. For Word 2010 SP2, update to a newer version to mitigate the risk. For Office Compatibility Pack SP3, update to a newer version to mitigate the risk. For Word Viewer, update to a newer version to mitigate the risk. For Word Automation Services on SharePoint Server 2010 SP2, update to a newer version to mitigate the risk. For Word Automation Services on SharePoint Server 2013 SP1, update to a newer version to mitigate the risk. For Office Web Apps 2010 SP2, update to a newer version to mitigate the risk. For Office Web Apps Server 2013 SP1, update to a newer version to mitigate the risk. As a temporary workaround, consider restricting access to crafted Office documents until a patch is available.

Fix

Information Disclosure

Weakness Enumeration

CWE-200

Related Identifiers

BDU:2016-01523

CVE-2016-3234

Affected Products

Office Word

Office

Office Compatibility Pack

Office Web Apps

Office Web Apps Server

Sharepoint Server

Word Viewer

References · 6

• https://nvd.nist.gov/vuln/detail/CVE-2016-3234 · Security Note
• https://bdu.fstec.ru/vul/2016-01523 · Security Note
• https://osv.dev/vulnerability/CVE-2016-3234 · Vendor Advisory
• https://docs.microsoft.com/en-us/security-updates/securitybulletins/2016/ms16-070 · Vendor Advisory
• http://technet.microsoft.com/security/bulletin/MS16-070 · Note
• http://securitytracker.com/id/1036093 · Note