Out-of-bounds Read in Microsoft products - CVE-2017-0105

Vulnerability details

The vulnerability exists due to out-of-bounds memory read when handling malicious Word files. A remote attacker can create a specially crafted .doc file, trick the victim into opening it, trigger memory corruption and gain access to important data.

Successful exploitation of this vulnerability may result in information disclosure on the vulnerable system.

Affected software

How to mitigate CVE-2017-0105

External References

• https://technet.microsoft.com/en-us/library/security/MS17-014

Related Security Bulletins

• Multiple vulnerabilities in Microsoft Office
• Microsoft Office Information Disclosure Vulnerability