Main Vulnerability Database Vulnerabilities #VU9647

Out-of-bounds read in Microsoft Office and Microsoft Office for macOS - CVE-2017-11934

Published: December 12, 2017 / Updated: December 12, 2017

Vulnerability identifier: #VU9647

CSH Severity: Low

CVSS v4: 4.6 [CVSS:4.0/AV:L/AC:L/AT:N/PR:N/UI:A/VC:L/VI:N/VA:N/SC:N/SI:N/SA:N]

CVE-ID: CVE-2017-11934

CWE-ID: CWE-125

Exploitation vector: Remote access

Exploit availability: No public exploit available

Vulnerability details

The vulnerability allows a remote attacker to obtain potentially sensitive information.

The vulnerability exists due to boundary error when processing PowerPoint files. A remote attacker can create a specially crafted PowerPoint file, trick the victim into opening it and obtain information and gain access to potentially sensitive information, stored in memory.

Affected software

Microsoft Office
Microsoft Office for macOS

How to mitigate CVE-2017-11934

Install updates from vendor's website.

External References

https://portal.msrc.microsoft.com/en-US/security-guidance/advisory/CVE-2017-11934

Related Security Bulletins