Free and open-source vulnerability scanner

Mageni eases for you the vulnerability scanning, assessment, and management process. It is free and open-source.

Install Now

Available for macOS, Windows, and Linux

CVE-2016-0053

Published

7 years ago

Last Modified

4 years ago

CVSSv2.0 Severity

High

CVSSv3.1 Severity

High

Impact Analysis

Microsoft Word 2007 SP3, Office 2010 SP2, Word 2010 SP2, Word 2013 SP1, Word 2013 RT SP1, Word 2016, Office Compatibility Pack SP3, Word Viewer, Word Automation Services on SharePoint Server 2013 SP1, Office Web Apps Server 2013 SP1, and SharePoint Server 2013 SP1 allow remote attackers to execute arbitrary code via a crafted Office document, aka "Microsoft Office Memory Corruption Vulnerability.".

CVSSv2.0 Score

Severity: High
Base Score: 9.3/10
Exploit Score: 8.6/10
Access Vector: Network
Access Complexity: Medium
Authentication Required: None
Impact Score: 10/10
Confidentiality Impact: Complete
Availability Impact: Complete
Integrity Impact: Complete

CVSSv3.1 Score

Severity: High
Base Score: 7.8/10
Exploit Score: 1.8/10
Access Vector: Local
Access Complexity: Low
Privileges Required: None
Impact Score: 5.9/10
Confidentiality Impact: High
Availability Impact: High
Integrity Impact: High
Scope: Unchanged
User Interaction: Required

Products Affected

CPE	Affected	Vulnerable	Excluding
cpe:2.3:a:microsoft:word:2013:sp1::::::	Yes	-	-
cpe:2.3:a:microsoft:word:2016:::::::*	Yes	-	-
cpe:2.3:a:microsoft:word:2013:sp1:::rt:::*	Yes	-	-
cpe:2.3:a:microsoft:office:2010:sp2:x64:::::*	Yes	-	-
cpe:2.3:a:microsoft:office_web_apps_server:2013:sp1:::::	Yes	-	-
cpe:2.3:a:microsoft:sharepoint_server:2013:sp1::::::	Yes	-	-
cpe:2.3:a:microsoft:office_compatibility_pack::sp3::::*:	Yes	-	-
cpe:2.3:a:microsoft:word:2010:sp2::::::	Yes	-	-
cpe:2.3:a:microsoft:word_viewer::::::::	Yes	-	-
cpe:2.3:a:microsoft:office:2010:sp2:x86:::::*	Yes	-	-
cpe:2.3:a:microsoft:word:2007:sp3::::::	Yes	-	-