Oval Definition:oval:org.cisecurity:def:503
Revision Date:2016-06-13Version:10
Title:Microsoft Office Memory Corruption Vulnerability – CVE-2016-0139 (MS16-042)
Description:Microsoft Excel 2010 SP2, Word for Mac 2011, and Excel Viewer allow remote attackers to execute arbitrary code via a crafted Office document, aka "Microsoft Office Memory Corruption Vulnerability."
Family:windowsClass:vulnerability
Status:ACCEPTEDReference(s):CVE-2016-0139
Platform(s):Microsoft Windows 10
Microsoft Windows 7
Microsoft Windows 8.1
Microsoft Windows Server 2008
Microsoft Windows Server 2008 R2
Microsoft Windows Server 2012
Microsoft Windows Server 2012 R2
Microsoft Windows Vista
Product(s):Microsoft Excel 2010
Microsoft Excel Viewer
Definition Synopsis
  • Microsoft Excel 2010 + file version
  • Microsoft Excel 2010 SP2 is installed
  • AND Check if excel.exe version is less than 14.0.7168.5000
  • OR Microsoft Excel Viewer + file version
  • Microsoft Excel Viewer 2007 SP3 is installed
  • AND Check if xlview.exe version is less than 12.0.6747.5000
  • BACK