CVE-2017-8572

Опубликовано: 01 авг. 2017

Источник: nvd

CVSS3: 5.5

CVSS2: 4.3

EPSS Средний

Описание

Microsoft Outlook 2007 SP3, Outlook 2010 SP2, Outlook 2013 SP1, Outlook 2013 RT SP1, and Outlook 2016 as packaged in Microsoft Office allows an information disclosure vulnerability due to the way that it discloses the contents of its memory, aka "Microsoft Office Outlook Information Disclosure Vulnerability".

Ссылки

http://www.securityfocus.com/bid/99453
Third Party Advisory
VDB Entry
http://www.securitytracker.com/id/1039010
Third Party Advisory
VDB Entry
https://portal.msrc.microsoft.com/en-US/security-guidance/advisory/CVE-2017-8572
Patch
Vendor Advisory
http://www.securityfocus.com/bid/99453
Third Party Advisory
VDB Entry
http://www.securitytracker.com/id/1039010
Third Party Advisory
VDB Entry
https://portal.msrc.microsoft.com/en-US/security-guidance/advisory/CVE-2017-8572
Patch
Vendor Advisory

Уязвимые конфигурации

Конфигурация 1

Одно из

cpe:2.3:a:microsoft:outlook:2007:sp3:*:*:*:*:*:*

cpe:2.3:a:microsoft:outlook:2010:sp2:*:*:*:*:*:*

cpe:2.3:a:microsoft:outlook:2013:sp1:*:*:*:*:*:*

cpe:2.3:a:microsoft:outlook:2016:*:*:*:*:*:*:*

EPSS

Процентиль: 93%

0.10846

Средний

5.5 Medium

CVSS3

4.3 Medium

CVSS2

Дефекты

CWE-200

Связанные уязвимости

CVE-2017-8572

msrc

почти 8 лет назад

Microsoft Outlook Information Disclosure Vulnerability

GHSA-p2x2-g9q4-v9rm