The remote Windows host is missing a security update. It is, therefore, affected by multiple vulnerabilities in Microsoft Office :

  - Multiple remote code execution vulnerabilities exist due     to improper handling of objects in memory.  An     unauthenticated, remote attacker can exploit these by     convincing a user to open a specially crafted file or     visit a website that hosts such a file, resulting in the     execution of arbitrary code in the context of the user.
    (CVE-2016-0025, CVE-2016-3233)

  - A flaw exists due to improper disclosure of memory     contents. An unauthenticated, remote attacker can     exploit this by convincing a user to open a specially     crafted file, resulting in the disclosure of potentially     sensitive information. (CVE-2016-3234)

  - A flaw exists due to improper validation of input     before loading OLE library files. A local attacker can     exploit this, via a specially crafted application, to     execute arbitrary code. (CVE-2016-3235)

Detections

Analytics

MS16-070: Security Update for Microsoft Office (3163610)

high Nessus Plugin ID 91611

Version 1.17

Version 1.16

Version 1.17 Apr 25, 2023, 11:11 PM CVSS temporal metrics (Adjust exploitability metrics for CISA KEV vulnerabilities) Plugin Feed: 202304252311
Version 1.16 Feb 17, 2023, 12:01 PM IAVM reference Plugin Feed: 202302171201