CVE-2017-8744

Опубликовано: 13 сент. 2017

Источник: nvd

CVSS3: 7.8

CVSS2: 9.3

EPSS Средний

Описание

A remote code execution vulnerability exists in Excel Services, Microsoft Excel 2007 Service Pack 3, Microsoft Excel 2010 Service Pack 2, Microsoft Excel 2013 Service Pack 1, Microsoft Excel 2013 RT Service Pack 1, and Microsoft Excel 2016 when they fail to properly handle objects in memory, aka "Microsoft Office Memory Corruption Vulnerability". This CVE ID is unique from CVE-2017-8630, CVE-2017-8632, and CVE-2017-8731.

Ссылки

http://www.securityfocus.com/bid/100748
Third Party Advisory
VDB Entry
http://www.securitytracker.com/id/1039315
Third Party Advisory
VDB Entry
https://portal.msrc.microsoft.com/en-US/security-guidance/advisory/CVE-2017-8744
Patch
Vendor Advisory
http://www.securityfocus.com/bid/100748
Third Party Advisory
VDB Entry
http://www.securitytracker.com/id/1039315
Third Party Advisory
VDB Entry
https://portal.msrc.microsoft.com/en-US/security-guidance/advisory/CVE-2017-8744
Patch
Vendor Advisory

Уязвимые конфигурации

Конфигурация 1

Одно из

cpe:2.3:a:microsoft:office:2007:sp3:*:*:*:*:*:*

cpe:2.3:a:microsoft:office:2010:sp2:*:*:*:*:*:*

cpe:2.3:a:microsoft:office:2013:sp1:*:*:*:*:*:*

cpe:2.3:a:microsoft:office:2016:*:*:*:*:*:*:*

EPSS

Процентиль: 96%

0.22842

Средний

7.8 High

CVSS3

9.3 Critical

CVSS2

Дефекты

CWE-119

Связанные уязвимости

CVE-2017-8744

msrc

почти 8 лет назад

Microsoft Office Remote Code Execution Vulnerability

GHSA-7fpc-7483-wqph