Main Vulnerability Database Vulnerabilities #VU7418

Memory corruption in Microsoft Office and Microsoft Office Web Apps - CVE-2017-0243

Published: July 11, 2017 / Updated: July 11, 2017

Vulnerability identifier: #VU7418

CSH Severity: High

CVSS v4: 8.4 [CVSS:4.0/AV:L/AC:L/AT:N/PR:N/UI:A/VC:H/VI:H/VA:H/SC:N/SI:N/SA:N]

CVE-ID: CVE-2017-0243

CWE-ID: CWE-119

Exploitation vector: Remote access

Exploit availability: No public exploit available

Vulnerability details

The vulnerability allows a remote attacker to execute arbitrary code on the target system.

The vulnerability exists due to boundary error when processing Microsoft Office documents. A remote unauthenticated attacker can create a specially crafted Microsoft Office document, trick the victim into opening it and execute arbitrary code on the target system.

Successful exploitation of this vulnerability may result in complete compromise of vulnerable system.

Affected software

Microsoft Office
Microsoft Office Web Apps

How to mitigate CVE-2017-0243

Install updates from vendor's website.

External References

https://portal.msrc.microsoft.com/en-US/security-guidance/advisory/CVE-2017-0243

Related Security Bulletins