cbcvebase.
CVE-2017-8742
published 2017-09-13

CVE-2017-8742: A remote code execution vulnerability exists in Microsoft PowerPoint 2007 Service Pack 3, Microsoft PowerPoint 2010 Service Pack 2, Microsoft PowerPoint 2013…

high7.8CVSS 3.0
AVLACLPRNUIRSUCHIHAH
A remote code execution vulnerability exists in Microsoft PowerPoint 2007 Service Pack 3, Microsoft PowerPoint 2010 Service Pack 2, Microsoft PowerPoint 2013 Service Pack 1, Microsoft PowerPoint 2013 RT Service Pack 1, Microsoft PowerPoint 2016, Microsoft PowerPoint Viewer 2007, Microsoft SharePoint Server 2013 Service Pack 1, Microsoft SharePoint Enterprise Server 2016, Microsoft Office Web Apps 2010 Service Pack 2, and Microsoft Office Compatibility Pack Service Pack 3 when they fail to properly handle objects in memory, aka "PowerPoint Remote Code Execution Vulnerability". This CVE ID is unique from CVE-2017-8743.

Affected

21 ranges
VendorProductVersion rangeFixed in
microsoftoffice_web_apps
microsoftoffice_web_apps_server
microsoftpowerpoint
microsoftpowerpoint
microsoftpowerpoint
microsoftpowerpoint
microsoftpowerpoint_viewer
microsoftsharepoint_enterprise_server
microsoftsharepoint_server
microsoft_corporationmicrosoft_office
msrcmicrosoft_office_compatibility_pack_service_pack_3
msrcmicrosoft_office_web_apps_2010_service_pack_2
msrcmicrosoft_office_web_apps_server_2013_service_pack_1
msrcmicrosoft_powerpoint_2007_service_pack_3
msrcmicrosoft_powerpoint_2010_service_pack_2
msrcmicrosoft_powerpoint_2013_rt_service_pack_1
msrcmicrosoft_powerpoint_2013_service_pack_1
msrcmicrosoft_powerpoint_2016
msrcmicrosoft_sharepoint_enterprise_server_2016
msrcmicrosoft_sharepoint_server_2013_service_pack_1
msrcpowerpoint_viewer_2010_32-bit_edition