CVE-2017-0029
6 documents5 sources
Severity
5.5MEDIUM
EPSS
22.6%
top 4.14%
CISA KEV
Not in KEV
Exploit
No known exploits
Affected products
Timeline
PublishedMar 17
Latest updateMay 13
Description
Microsoft Office 2010 SP2, Word 2010 SP2, Word 2013 RT SP1, and Word 2016 allow remote attackers to cause a denial of service (application hang) via a crafted Office document, aka "Microsoft Office Denial of Service Vulnerability."
CVSS vector
CVSS:3.0/AV:L/AC:L/PR:N/UI:R/S:U/C:N/I:N/A:HExploitability: 1.8 | Impact: 3.6
Affected Packages3 packages
▶CVEListV5microsoft_corporation/officeOffice 2010 SP2, Word 2010 SP2, Word 2013 RT SP1, and Word 2016
Patches
🔴Vulnerability Details
2GHSA▶
GHSA-r7qm-wmhv-c7qf: Microsoft Office 2010 SP2, Word 2010 SP2, Word 2013 RT SP1, and Word 2016 allow remote attackers to cause a denial of service (application hang) via a↗2022-05-13
CVEList▶
CVE-2017-0029: Microsoft Office 2010 SP2, Word 2010 SP2, Word 2013 RT SP1, and Word 2016 allow remote attackers to cause a denial of service (application hang) via a↗2017-03-17