RULE(RULE ID:316867)

Rule General Information
Release Date: 2017-02-03
Rule Name: FILE-OFFICE Microsoft Office Out of Bounds Read Vulnerability (CVE-2016-7264)
Severity:
CVE ID:
Rule Protection Details
Description: Microsoft Excel 2007 SP3, Office Compatibility Pack SP3, Excel Viewer, Excel for Mac 2011, and Excel 2016 for Mac allow remote attackers to obtain sensitive information from process memory or cause a denial of service (out-of-bounds read) via a crafted document, aka "Microsoft Office Information Disclosure Vulnerability."
Impact: An attacker can abtain sensitive information of the target victim, and do malicious actions to gain profits using the information.
Affected OS: Windows
Reference: MicrosoftSecurityBulletin:MS16-148
SecurityFocusBID:94769
SecurityTrackerID:1037441
Solutions
Microsoft has released a patch MS16-148 to eliminate the vulnerability. The patch can be downloaded at http://technet.microsoft.com/security/bulletin/MS16-148