CVE-2016-0012 (CNNVD-201601-212)
中文标题:
Microsoft Office ASLR绕过漏洞
英文标题:
Microsoft Office 2007 SP3, Excel 2007 SP3, PowerPoint 2007 SP3, Visio 2007 SP3, Word 2007 SP3, Offic...
漏洞描述
中文描述:
Microsoft Office是美国微软（Microsoft）公司开发的一款办公软件套件产品。常用组件有Word、Excel、Access、Powerpoint、FrontPage等。 Microsoft Office中存在安全功能绕过漏洞，该漏洞源于程序无法使用地址空间布局随机化(ASLR)安全功能。远程攻击者可利用该漏洞更可靠地预测给定调用堆栈中特定指令的内存偏移，绕过地址空间布局随机化(ASLR)安全功能。以下版本受到影响：Microsoft Office 2007 SP3，Excel 2007 SP3，PowerPoint 2007 SP3，Visio 2007 SP3，Word 2007 SP3，Office 2010 SP2，Excel 2010 SP2，PowerPoint 2010 SP2，Visio 2010 SP2，Word 2010 SP2，Office 2013 SP1，Excel 2013 SP1，PowerPoint 2013 SP1，Visio 2013 SP1，Word 2013 SP1，Excel 2013 RT SP1，PowerPoint 2013 RT SP1，Word 2013 RT SP1，Office 2016，Excel 2016，PowerPoint 2016，Visio 2016，Word 2016，Visual Basic 6.0 Runtime。
英文描述:
Microsoft Office 2007 SP3, Excel 2007 SP3, PowerPoint 2007 SP3, Visio 2007 SP3, Word 2007 SP3, Office 2010 SP2, Excel 2010 SP2, PowerPoint 2010 SP2, Visio 2010 SP2, Word 2010 SP2, Office 2013 SP1, Excel 2013 SP1, PowerPoint 2013 SP1, Visio 2013 SP1, Word 2013 SP1, Excel 2013 RT SP1, PowerPoint 2013 RT SP1, Word 2013 RT SP1, Office 2016, Excel 2016, PowerPoint 2016, Visio 2016, Word 2016, and Visual Basic 6.0 Runtime allow remote attackers to bypass the ASLR protection mechanism via unspecified vectors, aka "Microsoft Office ASLR Bypass."
CWE类型:
标签:
受影响产品
| 厂商 | 产品 | 版本 | 版本范围 | 平台 | CPE |
|---|---|---|---|---|---|
| microsoft | excel | 2007 | - | - |
cpe:2.3:a:microsoft:excel:2007:sp3:*:*:*:*:*:*
|
| microsoft | excel | 2010 | - | - |
cpe:2.3:a:microsoft:excel:2010:sp2:*:*:*:*:x64:*
|
| microsoft | excel | 2013 | - | - |
cpe:2.3:a:microsoft:excel:2013:sp1:*:*:*:*:*:*
|
| microsoft | excel | 2016 | - | - |
cpe:2.3:a:microsoft:excel:2016:*:*:*:*:*:*:*
|
| microsoft | office | 2007 | - | - |
cpe:2.3:a:microsoft:office:2007:sp3:*:*:*:*:*:*
|
| microsoft | office | 2010 | - | - |
cpe:2.3:a:microsoft:office:2010:sp2:x64:*:*:*:*:*
|
| microsoft | office | 2013 | - | - |
cpe:2.3:a:microsoft:office:2013:sp1:*:*:*:*:*:*
|
| microsoft | office | 2016 | - | - |
cpe:2.3:a:microsoft:office:2016:*:*:*:*:*:*:*
|
| microsoft | powerpoint | 2010 | - | - |
cpe:2.3:a:microsoft:powerpoint:2010:sp2:*:*:*:*:*:*
|
| microsoft | powerpoint | 2013 | - | - |
cpe:2.3:a:microsoft:powerpoint:2013:sp1:*:*:*:*:*:*
|
| microsoft | powerpoint | 2016 | - | - |
cpe:2.3:a:microsoft:powerpoint:2016:*:*:*:*:*:*:*
|
| microsoft | visio | 2007 | - | - |
cpe:2.3:a:microsoft:visio:2007:sp3:*:*:*:*:*:*
|
| microsoft | visio | 2010 | - | - |
cpe:2.3:a:microsoft:visio:2010:sp2:*:*:*:*:*:*
|
| microsoft | visio | 2013 | - | - |
cpe:2.3:a:microsoft:visio:2013:sp1:*:*:*:*:*:*
|
| microsoft | visio | 2016 | - | - |
cpe:2.3:a:microsoft:visio:2016:*:*:*:*:*:*:*
|
| microsoft | visual_basics | 6.0 | - | - |
cpe:2.3:a:microsoft:visual_basics:6.0:*:*:*:rt:*:*:*
|
| microsoft | word | 2007 | - | - |
cpe:2.3:a:microsoft:word:2007:sp3:*:*:*:*:*:*
|
| microsoft | word | 2010 | - | - |
cpe:2.3:a:microsoft:word:2010:sp2:*:*:*:*:*:*
|
| microsoft | word | 2013 | - | - |
cpe:2.3:a:microsoft:word:2013:sp1:*:*:*:*:*:*
|
| microsoft | word | 2016 | - | - |
cpe:2.3:a:microsoft:word:2016:*:*:*:*:*:*:*
|
解决方案
中文解决方案:
英文解决方案:
临时解决方案:
CVSS评分详情
CVSS:3.0/AV:N/AC:L/PR:N/UI:R/S:U/C:L/I:N/A:N
时间信息
利用信息
数据源详情
| 数据源 | 记录ID | 版本 | 提取时间 |
|---|---|---|---|
| CVE | cve_CVE-2016-0012 |
2025-11-11 15:19:02 | 2025-11-11 07:34:11 |
| NVD | nvd_CVE-2016-0012 |
2025-11-11 14:55:05 | 2025-11-11 07:42:52 |
| CNNVD | cnnvd_CNNVD-201601-212 |
2025-11-11 15:09:38 | 2025-11-11 07:52:21 |
版本与语言
安全公告
变更历史
查看详细变更
- vulnerability_type: 未提取 -> 信息泄露
- cnnvd_id: 未提取 -> CNNVD-201601-212
- data_sources: ['cve', 'nvd'] -> ['cnnvd', 'cve', 'nvd']
查看详细变更
- cvss_score: 未提取 -> 4.3
- cvss_vector: NOT_EXTRACTED -> CVSS:3.0/AV:N/AC:L/PR:N/UI:R/S:U/C:L/I:N/A:N
- cvss_version: NOT_EXTRACTED -> 3.0
- affected_products_count: 0 -> 20
- data_sources: ['cve'] -> ['cve', 'nvd']