CVE-2017-0003
published 2017-01-10CVE-2017-0003: Microsoft Word 2016 and SharePoint Enterprise Server 2016 allow remote attackers to execute arbitrary code via a crafted document, aka "Microsoft Office Memory…
PriorityP352high7.8CVSS 3.0
AVLACLPRNUIRSUCHIHAH
EPSS
24.69%
97.6th percentile
Microsoft Word 2016 and SharePoint Enterprise Server 2016 allow remote attackers to execute arbitrary code via a crafted document, aka "Microsoft Office Memory Corruption Vulnerability."
Affected
4 ranges
| Vendor | Product | Version range | Fixed in |
|---|---|---|---|
| microsoft | sharepoint_enterprise_server | — | — |
| microsoft | word | — | — |
| msrc | microsoft_sharepoint_enterprise_server_2016 | — | — |
| msrc | microsoft_word_2016 | — | — |
CVSS provenance
nvdv3.07.8HIGHCVSS:3.0/AV:L/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H
nvdv2.09.3CRITICALAV:N/AC:M/Au:N/C:C/I:C/A:C
vendor_msrc7.8HIGH
Stop checking back — get the weekly exploitation signal.
Every Monday: what got weaponized or added to CISA KEV in the last seven days — each CVE cross-linked to its PoC, Nuclei template, and detection rule. Free, one email a week, unsubscribe in one click.
GHSA
GHSA-7fw9-7v97-fp5r: Microsoft Word 2016 and SharePoint Enterprise Server 2016 allow remote attackers to execute arbitrary code via a crafted document, aka "Microsoft Offi
ghsa_unreviewed·2022-05-14
CVE-2017-0003 [HIGH] CWE-119 GHSA-7fw9-7v97-fp5r: Microsoft Word 2016 and SharePoint Enterprise Server 2016 allow remote attackers to execute arbitrary code via a crafted document, aka "Microsoft Offi
Microsoft Word 2016 and SharePoint Enterprise Server 2016 allow remote attackers to execute arbitrary code via a crafted document, aka "Microsoft Office Memory Corruption Vulnerability."
VMware
VMware Workstation update addresses multiple security issues
vendor_vmware·2017-03-09·CVSS 8.8
CVE-2017-4898 [HIGH] VMware Workstation update addresses multiple security issues
VMSA-2017-0003: VMware Workstation update addresses multiple security issues
a. VMware Workstation DLL loading vulnerability VMware Workstation Pro/Player contains a DLL loading vulnerability that occurs due to the "vmware-vmx" process loading DLLs from a path defined in the local environment-variable. Successful exploitation of this issue may allow normal users to escalate privileges to System in the host machine where VMware Workstation is installed. VMware would like to thank Ivil for reporting this issue to us. The Common Vulnerabilities and Exposures project (cve.mitre.org) has assigned the identifier CVE-2017-4898 to this issue. Column 5 of the following table lists the action required to remediate the vulnerability in each release, if a solution is available. VMware Product Product
Microsoft
Microsoft Office Memory Corruption Vulnerability
vendor_msrc·2017-01-10·CVSS 7.8
CVE-2017-0003 [HIGH] Microsoft Office Memory Corruption Vulnerability
Microsoft Office Memory Corruption Vulnerability
Description: A remote code execution vulnerability exists in Microsoft Office software when the software fails to properly handle objects in memory. An attacker who successfully exploited the vulnerability could run arbitrary code in the context of the current user. If the current user is logged on with administrative user rights, an attacker could take control of the affected system. An attacker could then install programs; view, change, or delete data; or create new accounts with full user rights. Users whose accounts are configured to have fewer user rights on the system could be less impacted than users who operate with administrative user rights.
Exploitation of the vulnerability requires that a user open a specially crafted file with
No detection rules found.
Fortinet
FortiGuard Labs Discovers Multiple Vulnerabilities in Microsoft Word
blogs_fortinet·2017-03-21·CVSS 7.8
[HIGH] FortiGuard Labs Discovers Multiple Vulnerabilities in Microsoft Word
FORTIGUARD LABS THREAT RESEARCH
FortiGuard Labs Discovers Multiple Vulnerabilities in Microsoft Word
By Tony Loi and Wayne Chin Yick Low | March 21, 2017
Over the last few months FortiGuard Labs discovered and reported multiple vulnerabilities found in different versions of Microsoft Word. These vulnerabilities were patched in the January (MS17-002) and March (MS17-014) security updates. These patches are rated as important, and as always, we suggest users update Microsoft Office as soon as possible.
Following are some details of these vulnerabilities:
CVE-2017-0003 (Affects MS Word 2016)
This is a memory corruption vulnerability that occurs due to a miscalculation of the size of the object in heap. Later, this miscalculated size is passed to other functions, which then write more con
Zscaler
Zscaler discovers MS Office Vulnerability | 01-10-2017
blogs_zscaler
Zscaler discovers MS Office Vulnerability | 01-10-2017
Provide users with seamless, secure, reliable access to applications and data.
Build and run secure cloud apps, enable zero trust cloud connectivity, and protect workloads from data center to cloud.
Provide zero trust connectivity for IoT and OT devices and secure remote access to OT systems.
Provide zero trust site-to-site connectivity and reliable access to B2B apps for partners.
Industry Report
Zscaler: A Leader in the 2025 Gartner® Magic Quadrant™ for Security Service Edge (SSE)
USE CASES
INDUSTRY & MARKET SOLUTIONS
PARTNERS
TECHNOLOGY PARTNERS
Resource Center
Events & Trainings
Security Research & Services
Tools
Community & Support
CXO REVOLUTIONARIES
Amplifying the voices of real-world digital and zero trust pioneers
Discover how it began and where it’s going
Meet o
Bugzilla
CVE-2017-12189 jboss: unsafe chown of server.log in jboss init script allows privilege escalation (Incomplete fix for CVE-2016-8656)
bugzilla·2017-10-09·CVSS 7.0
CVE-2017-12189 [HIGH] CVE-2017-12189 jboss: unsafe chown of server.log in jboss init script allows privilege escalation (Incomplete fix for CVE-2016-8656)
CVE-2017-12189 jboss: unsafe chown of server.log in jboss init script allows privilege escalation (Incomplete fix for CVE-2016-8656)
It was reported that the jbossas init script performed unsafe file handling, which could result in local privilege escalation.
Discussion:
This issue has been addressed in the following products:
Red Hat JBoss Enterprise Application Platform
Via RHSA-2018:0003 https://access.redhat.com/errata/RHSA-2018:0003
---
This issue has been addressed in the following products:
Red Hat JBoss Enterprise Application Platform 7.0 for RHEL 6
Via RHSA-2018:0002 https://access.redhat.com/errata/RHSA-2018:0002
---
This issue has been addressed in the following products:
Red Hat JBoss Enterprise Application Platform 7.0 for RHEL 7
Via RHSA-2018:0004 https://access.
Bugzilla
CVE-2017-7561 resteasy: Vary header not added by CORS filter leading to cache poisoning
bugzilla·2017-08-22·CVSS 7.5
CVE-2017-7561 [HIGH] CVE-2017-7561 resteasy: Vary header not added by CORS filter leading to cache poisoning
CVE-2017-7561 resteasy: Vary header not added by CORS filter leading to cache poisoning
The CORS Filter did not add an HTTP Vary header indicating that the response varies depending on Origin. This permitted client and server side cache poisoning in some circumstances.
Resteasy versions >=3.0.7 are affected because they include the CORS Filter.
Discussion:
Acknowledgments:
Name: Jason Shepherd (Red Hat Product Security)
---
RHMAP using RestEasy in UPS, but does not use CorsFilter class. Marking as not affected
---
Fixed upstream in Resteasy 4.0.0 via https://issues.jboss.org/browse/RESTEASY-1704
---
This issue has been addressed in the following products:
Red Hat JBoss Enterprise Application Platform
Via RHSA-2018:0003 https://access.redhat.com/errata/RHSA-2018:0003
---
This
http://fortiguard.com/advisory/FG-VD-16-079http://www.securityfocus.com/bid/95287http://www.securitytracker.com/id/1037568http://www.securitytracker.com/id/1037569https://docs.microsoft.com/en-us/security-updates/securitybulletins/2017/ms17-002http://fortiguard.com/advisory/FG-VD-16-079http://www.securityfocus.com/bid/95287http://www.securitytracker.com/id/1037568http://www.securitytracker.com/id/1037569https://docs.microsoft.com/en-us/security-updates/securitybulletins/2017/ms17-002
2017-01-10
Published