CVE:CVE-2016-3362
CNNVD:CNNVD-201609-197
Microsoft Office是美国微软（Microsoft）公司开发的一款办公软件套件产品。常用组件有Word、Excel、Access、Powerpoint、FrontPage等。
Microsoft Office软件中存在远程执行代码漏洞，该漏洞源于程序没有正确处理内存中的对象。远程攻击者可借助特制的文档利用该漏洞在当前用户的上下文中运行任意代码。以下版本受到影响：Microsoft Excel 2007 SP3，Excel 2010 SP2，Excel 2013 SP1，Excel 2013 RT SP1，Excel 2016，Office Compatibility Pack SP3，Excel Viewer，Excel Services on SharePoint Server 2007 SP3，Excel Services on SharePoint Server 2010 SP2，Excel Automation Services on SharePoint Server 2013 SP1，Office Online Server。
solution:Upgrade microsoft excel to a higher version than 2007:sp3,2010:sp2,2013:sp1,2016,and avoid the version 2007:sp3,2010:sp2,2013:sp1,2016; Upgrade microsoft excel_viewer to a higher version than *; Upgrade microsoft office_compatibility_pack to a higher version than *:sp3,and avoid the version *:sp3; Upgrade microsoft office_online_server to a higher version than *; Upgrade microsoft sharepoint_designer to a higher version than 2007:sp3,2010:sp2,2013:sp1,and avoid the version 2007:sp3,2010:sp2,2013:sp1