Microsoft Excel 2007 SP3, Excel 2010 SP2, Excel 2013 SP1, Excel 2013 RT SP1, Excel 2016, Office Compatibility Pack SP3, and Excel Viewer allow user-assisted remote attackers to execute arbitrary commands via a crafted cell that is mishandled upon a click, aka Microsoft Office Security Feature Bypass Vulnerability.
Affected Software
| Name | Vendor | Start Version | End Version |
|---|---|---|---|
| Excel | Microsoft | 2007-sp3 (including) | 2007-sp3 (including) |
| Excel | Microsoft | 2010-sp2 (including) | 2010-sp2 (including) |
| Excel | Microsoft | 2013-sp1 (including) | 2013-sp1 (including) |
| Excel | Microsoft | 2016 (including) | 2016 (including) |
| Excel_viewer | Microsoft | - (including) | - (including) |
| Office_compatibility_pack | Microsoft | –sp3 (including) | –sp3 (including) |
References
- http://www.securityfocus.com/bid/94660
- http://www.securitytracker.com/id/1037441
- https://docs.microsoft.com/en-us/security-updates/securitybulletins/2016/ms16-148
- http://www.securityfocus.com/bid/94660
- http://www.securitytracker.com/id/1037441
- https://docs.microsoft.com/en-us/security-updates/securitybulletins/2016/ms16-148
- https://www.cisa.gov/known-exploited-vulnerabilities-catalog?field_cve=CVE-2016-7262