Stats
- First seen
- April 2023
- Last seen
- September 2026
Description
Detects a workbook exploiting CVE-2016-7231, a remote code execution flaw in Microsoft Excel and the Excel Viewer. The rule matches the crafted sheet records that public exploits use to corrupt memory during parsing.