CVE-2017-0052

CWE-119 — Buffer Overflow4 documents4 sources
Severity
7.8HIGH
EPSS
26.2%
top 3.70%
CISA KEV
Not in KEV
Exploit
No known exploits
Affected products
3
Microsoft Corporation OfficeMicrosoft ExcelMicrosoft Sharepoint Server
Timeline
PublishedMar 17
Latest updateMay 17

Description

Microsoft Office Compatibility Pack SP3, Excel 2007 SP3, Excel Viewer, and Excel Services on SharePoint Server 2007 SP3 allow remote attackers to execute arbitrary code or cause a denial of service (memory corruption) via a crafted document, aka "Microsoft Office Memory Corruption Vulnerability." This vulnerability is different from those described in CVE-2017-0006, CVE-2017-0019, CVE-2017-0020, CVE-2017-0030, CVE-2017-0031, and CVE-2017-0053.

CVSS vector

CVSS:3.0/AV:L/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:HExploitability: 1.8 | Impact: 5.9

Affected Packages3 packages

▶NVDmicrosoft/excel2007
▶CVEListV5microsoft_corporation/officeOffice Compatibility Pack SP3, Excel 2007 SP3, Excel Viewer, and Excel Services on SharePoint Server 2007 SP3

Patches

Patch: portal.msrc.microsoft.com ↗Patch: portal.msrc.microsoft.com ↗

🔴Vulnerability Details

2
GHSA
GHSA-x77g-2fw6-m834: Microsoft Office Compatibility Pack SP3, Excel 2007 SP3, Excel Viewer, and Excel Services on SharePoint Server 2007 SP3 allow remote attackers to exec↗2022-05-17
▶
CVEList
CVE-2017-0052: Microsoft Office Compatibility Pack SP3, Excel 2007 SP3, Excel Viewer, and Excel Services on SharePoint Server 2007 SP3 allow remote attackers to exec↗2017-03-17
▶

📋Vendor Advisories

1
Microsoft
Microsoft Office Memory Corruption Vulnerability↗2017-03-14
▶
CVE-2017-0052 (HIGH CVSS 7.8) | Microsoft Office Compatibility Pack | cvebase.io