CVE-2017-11939

Microsoft Office 2016 Click-to-Run (C2R) allows an information disclosure vulnerability due to the way Microsoft Office enforces DRM copy/paste permissions, aka "Microsoft Office Information Disclosure Vulnerability".

Score

CVSS 3.0 6.5 Medium

Status

Modified - secure@microsoft.com

Published

2017-12-12

Last modified

2024-09-17

Weaknesses

CWE-200

Affected products

• Office (Microsoft)
• Microsoft Office (Microsoft Corporation)

References

• http://www.securityfocus.com/bid/102105
• http://www.securitytracker.com/id/1039994
• https://portal.msrc.microsoft.com/en-US/security-guidance/advisory/CVE-2017-11939