Vulnerability · NVD

CVE-2016-3366

CVE-2016-3366, medium severity (CVSS 6.5): 2 tracked apps concerned, all fixed or indeterminable on their current version.

Severity (CVSS): 6.5
Exploitation: 16.2 %
Tracked apps: 2
Still exposed: 0

Published on 2016-09-14

Microsoft Outlook 2007 SP3, Outlook 2010 SP2, Outlook 2013 SP1, Outlook 2013 RT SP1, Outlook 2016, and Outlook 2016 for Mac do not properly implement RFC 2046, which allows remote attackers to bypass virus or spam detection via crafted MIME data in an e-mail attachment, aka "Microsoft Office Spoofing Vulnerability."

Attack vector : Network No privileges required

Show raw CVSS vector

CVSS:3.0/AV:N/AC:L/PR:N/UI:R/S:U/C:N/I:H/A:N

EPSS 16.23% moderate exploit risk percentile 96.7%

Tracked apps referencing this CVE

For each app: the affected range, the fixing version, and where the tracked app stands today.

Microsoft Outlook macOS com.microsoft.Outlook

Affected - Fixed in - Latest tracked 16.112.26081720 undetermined
Microsoft Office Windows winget:Microsoft.Office

Affected - Fixed in - Latest tracked - undetermined

Vulnerable CPE configurations (7)

Vendor	Product	Platform	Versions	CPE 2.3 URI
microsoft	outlook All platforms (wildcard)	All platforms (wildcard)	-	cpe:2.3:a:microsoft:outlook:2007:sp3::::::
microsoft	outlook All platforms (wildcard)	All platforms (wildcard)	-	cpe:2.3:a:microsoft:outlook:2007:sp3::::::
microsoft	outlook All platforms (wildcard)	All platforms (wildcard)	-	cpe:2.3:a:microsoft:outlook:2010:sp2::::::
microsoft	outlook All platforms (wildcard)	All platforms (wildcard)	-	cpe:2.3:a:microsoft:outlook:2010:sp2::::::
microsoft	outlook All platforms (wildcard)	All platforms (wildcard)	-	cpe:2.3:a:microsoft:outlook:2013:sp1::::::
microsoft	outlook All platforms (wildcard)	All platforms (wildcard)	-	cpe:2.3:a:microsoft:outlook:2013:sp1::::::
microsoft	outlook macOS	macOS	-	cpe:2.3:a:microsoft:outlook:2016:::::macos::

View on NVD ↗