Oval Definition:oval:org.cisecurity:def:1448
Revision Date:2016-12-23Version:6
Title:Microsoft Office Memory Corruption Vulnerability – CVE-2016-7231 (MS16-133)
Description:Microsoft Excel 2007 SP3, Excel for Mac 2011, Office Compatibility Pack SP3, and Excel Viewer allow remote attackers to execute arbitrary code via a crafted Office document, aka "Microsoft Office Memory Corruption Vulnerability."
Family:windowsClass:vulnerability
Status:ACCEPTEDReference(s):CVE-2016-7231
Platform(s):Microsoft Windows 10
Microsoft Windows 7
Microsoft Windows 8
Microsoft Windows 8.1
Microsoft Windows Server 2003
Microsoft Windows Server 2008
Microsoft Windows Server 2008 R2
Microsoft Windows Server 2012
Microsoft Windows Server 2012 R2
Microsoft Windows Vista
Product(s):Microsoft Excel 2007
Microsoft Excel Viewer
Microsoft Office Compatibility Pack
Definition Synopsis
  • Microsoft Excel 2007 + file version
  • Microsoft Excel 2007 SP3 is installed
  • AND Check if the version of excel.exe is less than 12.0.6759.5000
  • OR Microsoft Office Compatibility Pack + file version
  • Microsoft Office Compatibility Pack SP3 is installed
  • AND Check if the version of excelcnv.exe is less than 12.0.6759.5000
  • OR Microsoft Excel Viewer + file version
  • Microsoft Excel Viewer 2007 is installed
  • AND Check if the version of xlview.exe is less than 12.0.6759.5000
  • BACK