CVE-2016-3279

Microsoft Office Security Feature Bypass Vulnerability

CVE-2016-3279 is fixed in 24 products on 1 platform, first by KB3115322, released July 12, 2016. It is not reported as exploited. Patch Radar priority: High.

High
CVSS
n/a
Important
Exploitation
None reported
Exploitation Less Likely
CISA KEV
Not listed
Not in the Known Exploited Vulnerabilities catalog
EPSS
0.1642
96th percentile

<p>A security feature bypass vulnerability exists in Microsoft Office software when it improperly handles the parsing of file formats. The security feature bypass by itself does not allow arbitrary code execution. However, to successfully exploit the vulnerability, an attacker would have to use it in conjunction with another vulnerability, such as a remote code execution vulnerability, to take advantage of the security feature bypass vulnerability and run arbitrary code.</p> <p>To exploit the vulnerability, an attacker would have to convince a user to open a specially crafted file with an affected version of Microsoft Office software.</p> <p>The security update addresses the vulnerability by correcting how Microsoft Office handles the parsing of file formats.</p>

Where it's fixed

ProductFixed inFixReleased
Microsoft
Microsoft Excel 2010 Service Pack 2 (32-bit editions) KB3115322 Jul 12, 2016
Microsoft Excel 2010 Service Pack 2 (64-bit editions) KB3115322 Jul 12, 2016
Microsoft Excel 2013 RT Service Pack 1 KB3115262 Jul 12, 2016
Microsoft Excel 2013 Service Pack 1 (32-bit editions) KB3115262 Jul 12, 2016
Microsoft Excel 2013 Service Pack 1 (64-bit editions) KB3115262 Jul 12, 2016
Microsoft Excel 2016 (32-bit edition) KB3115272 Jul 12, 2016
Microsoft Excel 2016 (64-bit edition) KB3115272 Jul 12, 2016
Microsoft Office 2010 Service Pack 2 (32-bit editions) KB3115315 Jul 12, 2016
Microsoft Office 2010 Service Pack 2 (64-bit editions) KB3115315 Jul 12, 2016
Microsoft Office Web Apps 2010 Service Pack 2 KB3115318 Jul 12, 2016
Microsoft Office Web Apps 2013 Service Pack 1 KB3115289 Jul 12, 2016
Microsoft PowerPoint 2010 Service Pack 2 (32-bit editions) KB3115118 Jul 12, 2016
Microsoft PowerPoint 2010 Service Pack 2 (64-bit editions) KB3115118 Jul 12, 2016
Microsoft PowerPoint 2013 RT Service Pack 1 KB3115254 Jul 12, 2016
Microsoft PowerPoint 2013 Service Pack 1 (32-bit editions) KB3115254 Jul 12, 2016
Microsoft PowerPoint 2013 Service Pack 1 (64-bit editions) KB3115254 Jul 12, 2016
Microsoft SharePoint Server 2010 Service Pack 2 on Word Automation Services KB3115312 Jul 12, 2016
Microsoft Word 2010 Service Pack 2 (32-bit editions) KB3115317 Jul 12, 2016
Microsoft Word 2010 Service Pack 2 (64-bit editions) KB3115317 Jul 12, 2016
Microsoft Word 2013 RT Service Pack 1 KB3115292 Jul 12, 2016
Microsoft Word 2013 Service Pack 1 (32-bit editions) KB3115292 Jul 12, 2016
Microsoft Word 2013 Service Pack 1 (64-bit editions) KB3115292 Jul 12, 2016
Microsoft Word 2016 (32-bit edition) KB3115301 Jul 12, 2016
Microsoft Word 2016 (64-bit edition) KB3115301 Jul 12, 2016