CVE-2017-0243

CWE-119 — Buffer Overflow4 documents4 sources
Severity
7.8HIGH
EPSS
34.0%
top 3.03%
CISA KEV
Not in KEV
Exploit
No known exploits
Affected products
3
Microsoft Business Productivity ServersMicrosoft OfficeMicrosoft WEB Applications
Timeline
PublishedJul 11
Latest updateMay 17

Description

Microsoft Office allows a remote code execution vulnerability due to the way that it handles objects in memory, aka "Microsoft Office Remote Code Execution Vulnerability". This CVE ID is unique from CVE-2017-8570.

CVSS vector

CVSS:3.0/AV:L/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:HExploitability: 1.8 | Impact: 5.9

Affected Packages3 packages

▶NVDmicrosoft/office2007, 2010+1

Patches

Patch: portal.msrc.microsoft.com ↗Patch: portal.msrc.microsoft.com ↗

🔴Vulnerability Details

2
GHSA
GHSA-c2m8-mp3j-qvvc: Microsoft Office allows a remote code execution vulnerability due to the way that it handles objects in memory, aka "Microsoft Office Remote Code Exec↗2022-05-17
▶
CVEList
CVE-2017-0243: Microsoft Office allows a remote code execution vulnerability due to the way that it handles objects in memory, aka "Microsoft Office Remote Code Exec↗2017-07-11
▶

📋Vendor Advisories

1
Microsoft
Microsoft Office Remote Code Execution Vulnerability↗2017-07-11
▶
CVE-2017-0243 (HIGH CVSS 7.8) | Microsoft Office allows a remote co | cvebase.io