Lucene search
K
Database
Vendors
Products
Years
CVSS
Scanner
Agent Scanning
API Scanning
Manual Audit
Perimeter Scanner
Scanning
Projects
Email
Webhook
Plugins
Resources
Documents
Blog
Glossary
FAQ
Pricing
Contacts
About Us
Partners
Branding Guideline
cve[email protected]CVE-2017-11882
HistoryNov 15, 2017 - 3:29 a.m.

CVE-2017-11882

2017-11-1503:29:00
CWE-119
[email protected]
web.nvd.nist.gov
2044
In Wild
34
22
microsoft office
cve-2017-11882
memory corruption
vulnerability
nvd

7.8 High

CVSS3

Attack Vector

LOCAL

Attack Complexity

LOW

Privileges Required

NONE

User Interaction

REQUIRED

Scope

UNCHANGED

Confidentiality Impact

HIGH

Integrity Impact

HIGH

Availability Impact

HIGH

CVSS:3.1/AV:L/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H

8.2 High

AI Score

Confidence

High

9.3 High

CVSS2

Access Vector

NETWORK

Access Complexity

MEDIUM

Authentication

NONE

Confidentiality Impact

COMPLETE

Integrity Impact

COMPLETE

Availability Impact

COMPLETE

AV:N/AC:M/Au:N/C:C/I:C/A:C

0.974 High

EPSS

Percentile

99.9%

JSON

Microsoft Office 2007 Service Pack 3, Microsoft Office 2010 Service Pack 2, Microsoft Office 2013 Service Pack 1, and Microsoft Office 2016 allow an attacker to run arbitrary code in the context of the current user by failing to properly handle objects in memory, aka “Microsoft Office Memory Corruption Vulnerability”. This CVE ID is unique from CVE-2017-11884.

VendorProductVersionCPE
microsoftoffice*cpe:2.3:a:microsoft:office:*:*:*:*:*:*:*:*

References

Social References

More

Related

attackerkb 1
threatpost 162
prion 2
cve 1
checkpoint_advisories 1
talosblog 3
hivepro 2
exploitpack 1
thn 5
mskb 3
securelist 10
malwarebytes 2
mssecure 1
myhack58 1
metasploit 1
mscve 1
carbonblack 1
zdt 1
attackerkb
attackerkb
CVE-2017-11882
2017-11-15 00:00:00
threatpost
threatpost
Microsoft Patches 17-Year-Old Office Bug
2017-11-15 13:11:21
Microsoft Brings Perfect Forward Secrecy to Windows
2015-05-13 12:14:00
Microsoft Aims to Make Life Harder, More Expensive For Attackers
2012-01-13 15:31:13
prion
prion
Memory corruption
2017-11-15 03:29:00
Memory corruption
2017-11-15 03:29:00
cve
cve
CVE-2017-11884
2017-11-15 03:29:00
checkpoint_advisories
checkpoint_advisories
Microsoft Office Memory Corruption Remote Code Execution (CVE-2017-11882)
2017-11-21 00:00:00
talosblog
talosblog
New HawkEye Reborn Variant Emerges Following Ownership Change
2019-04-16 11:45:39
It's alive: Threat actors cobble together open-source pieces into monstrous Frankenstein campaign
2019-06-05 00:45:28
Malicious campaign uses a barrage of commodity RATs to target Afghanistan and India
2021-10-26 13:13:13
hivepro
hivepro
Cloud Atlas Exploits Six-Year-Old Flaw to Target Russian Companies
2023-12-28 14:23:55
Russian threat actor UAC-0056 targets European countries
2022-03-18 08:27:31
exploitpack
exploitpack
Microsoft Office - OLE Remote Code Execution
2017-11-20 00:00:00
thn
thn
U.S. DoJ Dismantles Warzone RAT Infrastructure, Arrests Key Operators
2024-02-11 10:54:00
New Agent Tesla Malware Variant Using ZPAQ Compression in Email Attacks
2023-11-21 11:57:00
Chinese Hackers Carried Out Country-Level Watering Hole Attack
2018-06-14 15:10:00
mskb
mskb
Description of the security update for 2007 Microsoft Office Suite: November 28, 2017
2017-11-14 08:00:00
Description of the security update for Office 2010: November 14, 2017
2020-04-13 00:00:00
Description of the security update for Office 2013: November 14, 2017
2017-11-14 08:00:00
securelist
securelist
Spam and phishing in Q1 2021
2021-05-03 10:00:36
Spam and phishing in Q2 2018
2018-08-14 10:00:36
Spam and phishing in 2020
2021-02-15 10:00:38
malwarebytes
malwarebytes
Microsoft is now disabling Excel 4.0 macros by default
2022-01-24 15:39:51
Beware of malware offering “Warm greetings from Saudi Aramco”
2022-03-05 17:35:27
mssecure
mssecure
In hot pursuit of elusive threats: AI-driven behavior-based blocking stops attacks in their tracks
2019-10-08 15:00:11
myhack58
myhack58
Wary of the use of the Office vulnerabilities to spread commercial spyware AgentTesla-vulnerability warning-the black bar safety net
2019-05-28 00:00:00
metasploit
metasploit
Microsoft Office CVE-2017-11882
2017-11-21 19:47:02
mscve
mscve
Microsoft Office Memory Corruption Vulnerability
2017-11-14 08:00:00
carbonblack
carbonblack
TAU Threat Intelligence Notification: NanoCore – Old Malware, New Tricks!
2019-03-20 19:14:15
zdt
zdt
Microsoft Office Equation Editor Code Execution Exploit
2017-12-06 00:00:00

7.8 High

CVSS3

Attack Vector

LOCAL

Attack Complexity

LOW

Privileges Required

NONE

User Interaction

REQUIRED

Scope

UNCHANGED

Confidentiality Impact

HIGH

Integrity Impact

HIGH

Availability Impact

HIGH

CVSS:3.1/AV:L/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H

8.2 High

AI Score

Confidence

High

9.3 High

CVSS2

Access Vector

NETWORK

Access Complexity

MEDIUM

Authentication

NONE

Confidentiality Impact

COMPLETE

Integrity Impact

COMPLETE

Availability Impact

COMPLETE

AV:N/AC:M/Au:N/C:C/I:C/A:C

0.974 High

EPSS

Percentile

99.9%

JSON
Related for CVE-2017-11882
attackerkb1threatpost162prion2cve1checkpoint_advisories1talosblog3hivepro2exploitpack1thn5mskb3securelist10malwarebytes2mssecure1myhack581metasploit1mscve1carbonblack1zdt1