Microsoft Office Memory Corruption Vulnerability (CVE-2016-0134)

Publish date: April 07, 2016
  Severity: HIGH
  CVE Identifier: CVE-2016-0134
  Advisory Date: APR 07, 2016

  DESCRIPTION

This security update resolves vulnerabilities in Microsoft Office. The more severe of the vulnerabilities could allow remote code execution if these vulnerabilities are successfully exploited. Trend Micro researcher Jack Tang is credited for discovery and report of one of the vulnerabilities in the update.

  SOLUTION

  PATCH: https://technet.microsoft.com/en-us/library/security/ms16-mar.aspx

  Trend Micro Deep Security DPI Rule Name: 1007517 - Microsoft Office Memory Corruption Vulnerability (CVE-2016-0134)

  AFFECTED SOFTWARE AND VERSION

  • Microsoft Word 2007 Service Pack 3
  • Microsoft Office 2010 Service Pack 2 (32-bit editions)
  • Microsoft Office 2010 Service Pack 2 (64-bit editions)
  • Microsoft Word 2010 Service Pack 2 (32-bit editions)
  • Microsoft Word 2010 Service Pack 2 (64-bit editions)
  • Microsoft Word 2013 Service Pack 1 (32-bit editions)
  • Microsoft Word 2013 Service Pack 1 (64-bit editions)
  • Microsoft Word 2013 RT Service Pack 1
  • Microsoft Word 2016 (32-bit edition)
  • Microsoft Word 2016 (64-bit edition)
  • Microsoft Word for Mac 2011
  • Microsoft Word 2016 for Mac
  • Microsoft Office Compatibility Pack Service Pack 3
  • Microsoft Word Viewer

Featured Stories