Memory corruption in Microsoft products - CVE-2017-0029

Vulnerability identifier: #VU6017

CSH Severity: Low

CVSS v4: 4.6 [CVSS:4.0/AV:L/AC:L/AT:N/PR:N/UI:A/VC:N/VI:N/VA:L/SC:N/SI:N/SA:N]

CVE-ID: CVE-2017-0029

CWE-ID: CWE-119

Exploitation vector: Remote access

Exploit availability: No public exploit available

The vulnerability allows a remote attacker to cause DoS conditions on the target system.

The weakness exists due improper handling of malicious Word files in memory. A remote attacker can create a specially crafted .doc file, trick the victim into opening it, trigger memory corruption and cause the target application to crash.

Successful exploitation of the vulnerability results in denial of service on the vulnerable system.

Microsoft Office
Microsoft Word
Microsoft Word for macOS

Install update from vendor's website.

• https://technet.microsoft.com/en-us/library/security/MS17-014

• Multiple vulnerabilities in Microsoft Office
• Microsoft Office Denial of Service Vulnerability