CVE-2017-0243

Microsoft Office allows a remote code execution vulnerability due to the way that it handles objects in memory, aka "Microsoft Office Remote Code Execution Vulnerability". This CVE ID is unique from CVE-2017-8570.

Score

CVSS 3.0 7.8 High

Status

Modified - secure@microsoft.com

Published

2017-07-11

Last modified

2024-09-16

Weaknesses

CWE-119

Affected products

• Business Productivity Servers (Microsoft)
• Office (Microsoft)
• Web Applications (Microsoft)
• And Microsoft Business Productivity Servers 2010 Sp2. (Microsoft Corporation)
• Microsoft Office 2007 Sp2 And Sp3 (Microsoft Corporation)
• Microsoft Office 2010 Sp2 (Microsoft Corporation)
• Microsoft Office Web Apps 2010 Sp2 (Microsoft Corporation)

References

• http://www.securityfocus.com/bid/99446
• http://www.securitytracker.com/id/1038851
• https://portal.msrc.microsoft.com/en-us/security-guidance/advisory/CVE-2017-0243