CVE-2017-0199

Опубликовано: 12 апр. 2017

Источник: nvd

CVSS3: 7.8

CVSS2: 9.3

EPSS Критический

Описание

Microsoft Office 2007 SP3, Microsoft Office 2010 SP2, Microsoft Office 2013 SP1, Microsoft Office 2016, Microsoft Windows Vista SP2, Windows Server 2008 SP2, Windows 7 SP1, Windows 8.1 allow remote attackers to execute arbitrary code via a crafted document, aka "Microsoft Office/WordPad Remote Code Execution Vulnerability w/Windows API."

Ссылки

http://rewtin.blogspot.nl/2017/04/cve-2017-0199-practical-exploitation-poc.html
Exploit
Third Party Advisory
http://www.securityfocus.com/bid/97498
Broken Link
Third Party Advisory
VDB Entry
http://www.securitytracker.com/id/1038224
Broken Link
Third Party Advisory
VDB Entry
https://blog.nviso.be/2017/04/12/analysis-of-a-cve-2017-0199-malicious-rtf-document/
Exploit
Third Party Advisory
https://ics-cert.us-cert.gov/advisories/ICSMA-18-058-02
Third Party Advisory
US Government Resource
https://portal.msrc.microsoft.com/en-US/security-guidance/advisory/CVE-2017-0199
Patch
Vendor Advisory
https://www.exploit-db.com/exploits/41894/
Exploit
Third Party Advisory
VDB Entry
https://www.exploit-db.com/exploits/41934/
Exploit
Third Party Advisory
VDB Entry
https://www.exploit-db.com/exploits/42995/
Third Party Advisory
VDB Entry
https://www.fireeye.com/blog/threat-research/2017/04/cve-2017-0199_useda.html
Broken Link
Exploit
Third Party Advisory
https://www.mdsec.co.uk/2017/04/exploiting-cve-2017-0199-hta-handler-vulnerability/
Exploit
Third Party Advisory
http://rewtin.blogspot.nl/2017/04/cve-2017-0199-practical-exploitation-poc.html
Exploit
Third Party Advisory
http://www.securityfocus.com/bid/97498
Broken Link
Third Party Advisory
VDB Entry
http://www.securitytracker.com/id/1038224
Broken Link
Third Party Advisory
VDB Entry
https://blog.nviso.be/2017/04/12/analysis-of-a-cve-2017-0199-malicious-rtf-document/
Exploit
Third Party Advisory
https://ics-cert.us-cert.gov/advisories/ICSMA-18-058-02
Third Party Advisory
US Government Resource
https://portal.msrc.microsoft.com/en-US/security-guidance/advisory/CVE-2017-0199
Patch
Vendor Advisory
https://www.exploit-db.com/exploits/41894/
Exploit
Third Party Advisory
VDB Entry
https://www.exploit-db.com/exploits/41934/
Exploit
Third Party Advisory
VDB Entry
https://www.exploit-db.com/exploits/42995/
Third Party Advisory
VDB Entry

Уязвимые конфигурации

Конфигурация 1

Одно из

cpe:2.3:a:microsoft:office:2007:sp3:*:*:*:*:*:*

cpe:2.3:a:microsoft:office:2010:sp2:*:*:*:*:*:*

cpe:2.3:a:microsoft:office:2013:sp1:*:*:*:*:*:*

cpe:2.3:a:microsoft:office:2016:-:*:*:*:*:*:*

cpe:2.3:o:microsoft:windows_7:-:sp1:*:*:*:*:*:*

cpe:2.3:o:microsoft:windows_server_2008:-:sp2:*:*:*:*:*:*

cpe:2.3:o:microsoft:windows_server_2008:r2:sp1:*:*:*:*:*:*

cpe:2.3:o:microsoft:windows_server_2012:-:*:*:*:*:*:*:*

cpe:2.3:o:microsoft:windows_vista:-:sp2:*:*:*:*:*:*

Конфигурация 2

Одно из

cpe:2.3:a:philips:intellispace_portal:7.0:*:*:*:*:*:*:*

cpe:2.3:a:philips:intellispace_portal:8.0:*:*:*:*:*:*:*

EPSS

Процентиль: 100%

0.94366

Критический

7.8 High

CVSS3

9.3 Critical

CVSS2

Дефекты

NVD-CWE-noinfo

Связанные уязвимости

CVE-2017-0199

CVSS3: 6.7

msrc

около 8 лет назад

Microsoft Office/WordPad Remote Code Execution Vulnerability w/Windows

GHSA-mrf9-75pc-cjmm

CVSS3: 7.8

github

около 3 лет назад

BDU:2017-01034

CVSS3: 8.8

fstec