CVE:CVE-2016-3279
CNNVD:CNNVD-201607-221
Microsoft Office是美国微软（Microsoft）公司开发的一款办公软件套件产品。常用组件有Word、Excel、Access、Powerpoint、FrontPage等。
Microsoft Office中存在安全漏洞，该漏洞源于程序没有正确处理XLA文件。远程攻击者可利用该漏洞执行任意代码。以下软件和版本受到影响：Microsoft Office 2010 SP2，Excel 2010 SP2，PowerPoint 2010 SP2，Word 2010 SP2，Excel 2013 SP1，PowerPoint 2013 SP1，Word 2013 SP1，Excel 2013 RT SP1，PowerPoint 2013 RT SP1，Word 2013 RT SP1，Excel 2016，Word 2016，Word Automation Services on SharePoint Server 2010 SP2，Office Web Apps 2010 SP2。
solution:Upgrade microsoft excel to a higher version than 2010:sp2,2013:sp1,2016,and avoid the version 2010:sp2,2013:sp1,2016; Upgrade microsoft excel_rt to a higher version than 2013:sp1,and avoid the version 2013:sp1; Upgrade microsoft office to a higher version than 2010:sp2,and avoid the version 2010:sp2; Upgrade microsoft office_web_apps to a higher version than 2010:sp2,and avoid the version 2010:sp2; Upgrade microsoft powerpoint to a higher version than 2010:sp2,2013:sp1,and avoid the version 2010:sp2,2013:sp1; Upgrade microsoft powerpoint_rt to a higher version than 2013:sp1,and avoid the version 2013:sp1; Upgrade microsoft sharepoint_server to a higher version than 2010:sp2,and avoid the version 2010:sp2; Upgrade microsoft word to a higher version than 2010:sp2,2013:sp1,2016,and avoid the version 2010:sp2,2013:sp1,2016; Upgrade microsoft word_rt to a higher version than 2013:sp1,and avoid the version 2013:sp1