Microsoft Word 2007 SP3, Office 2010 SP2, Word 2010 SP2, Word 2013 SP1, Word 2013 RT SP1, Word 2016, Word for Mac 2011, Word 2016 for Mac, Office Compatibility Pack SP3, Word Viewer, Word Automation Services on SharePoint Server 2013 SP1, Office Web Apps Server 2013 SP1, and SharePoint Server 2013 SP1 allow remote attackers to execute arbitrary code via a crafted Office document, aka "Microsoft Office Memory Corruption Vulnerability," a different vulnerability than CVE-2016-0022.

The version of Microsoft Office installed on the remote Mac OS X host is affected by multiple remote code execution vulnerabilities due to improper handling of objects in memory. A remote attacker can exploit these vulnerabilities by convincing a user to open a specially crafted file in Microsoft Office, resulting in execution of arbitrary code in the context of the current user.

The remote Windows host has a version of Microsoft Office, Word, Word Viewer, Excel, Excel Viewer, SharePoint, Microsoft Office Compatibility Pack, or Office Web Apps installed that is affected by multiple vulnerabilities :

  - Multiple remote code execution vulnerabilities exist due     to improper handling of objects in memory. A remote     attacker can exploit these vulnerabilities by convincing     a user to open a specially crafted file in Microsoft     Office, resulting in the execution of arbitrary code in     the context of the current user. (CVE-2016-0022,     CVE-2016-0052, CVE-2016-0053, CVE-2016-0054,     CVE-2016-0055, CVE-2015-0056)

  - A cross-site scripting vulnerability exists in     SharePoint due to improper sanitization of specially     crafted web requests. An authenticated, remote attacker     can exploit this, via a specially crafted web request,     to execute arbitrary script code in a user's browser     session. (CVE-2016-0039)

ID	Name	Product	Family	Severity
88880	MS16-015: Security Update for Microsoft Office to Address Remote Code Execution (3134226) (Mac OS X)	Nessus	MacOS X Local Security Checks	high
88647	MS16-015: Security Update for Microsoft Office to Address Remote Code Execution (3134226)	Nessus	Windows : Microsoft Bulletins	high

Detections

Analytics

CVE-2016-0052

high

Tenable Plugins

high

high