Lucene search
K
Database
Vendors
Products
Years
CVSS
Scanner
Agent Scanning
API Scanning
Manual Audit
Perimeter Scanner
Scanning
Projects
Email
Webhook
Plugins
Resources
Documents
Blog
Glossary
FAQ
Pricing
Contacts
About Us
Partners
Branding Guideline
prionPRIOn knowledge basePRION:CVE-2017-11884
HistoryNov 15, 2017 - 3:29 a.m.

Memory corruption

2017-11-1503:29:00
PRIOn knowledge base
www.prio-n.com
7

7.8 High

CVSS3

Attack Vector

LOCAL

Attack Complexity

LOW

Privileges Required

NONE

User Interaction

REQUIRED

Scope

UNCHANGED

Confidentiality Impact

HIGH

Integrity Impact

HIGH

Availability Impact

HIGH

CVSS:3.0/AV:L/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H

7.9 High

AI Score

Confidence

High

9.3 High

CVSS2

Access Vector

NETWORK

Access Complexity

MEDIUM

Authentication

NONE

Confidentiality Impact

COMPLETE

Integrity Impact

COMPLETE

Availability Impact

COMPLETE

AV:N/AC:M/Au:N/C:C/I:C/A:C

0.004 Low

EPSS

Percentile

73.6%

JSON

Microsoft Excel 2016 Click-to-Run (C2R) allows an attacker to run arbitrary code in the context of the current user by failing to properly handle objects in memory, aka “Microsoft Office Memory Corruption Vulnerability”. This CVE ID is unique from CVE-2017-11882.

CPENameOperatorVersion
exceleq2016

Related

threatpost 156
attackerkb 1
cvelist 2
cve 2
prion 1
zdi 1
mscve 1
symantec 1
checkpoint_advisories 1
hivepro 2
thn 5
malwarebytes 1
securelist 10
exploitpack 1
myhack58 1
talosblog 4
metasploit 1
mskb 3
mssecure 1
fireeye 1
ics 1
openvas 2
threatpost
threatpost
Microsoft Patches 17-Year-Old Office Bug
2017-11-15 13:11:21
Microsoft Brings Perfect Forward Secrecy to Windows
2015-05-13 12:14:00
Microsoft Aims to Make Life Harder, More Expensive For Attackers
2012-01-13 15:31:13
attackerkb
attackerkb
CVE-2017-11882
2017-11-15 00:00:00
cvelist
cvelist
CVE-2017-11884
2017-11-14 00:00:00
CVE-2017-11882
2017-11-14 00:00:00
cve
cve
CVE-2017-11882
2017-11-15 03:29:00
CVE-2017-11884
2017-11-15 03:29:00
prion
prion
Memory corruption
2017-11-15 03:29:00
zdi
zdi
Microsoft Office Excel XLS File Parsing Use-After-Free Remote Code Execution Vulnerability
2017-12-06 00:00:00
mscve
mscve
Microsoft Excel Remote Code Execution Vulnerability
2017-11-14 08:00:00
symantec
symantec
Microsoft Office CVE-2017-11884 Memory Corruption Vulnerability
2017-11-14 00:00:00
checkpoint_advisories
checkpoint_advisories
Microsoft Office Memory Corruption Remote Code Execution (CVE-2017-11882)
2017-11-21 00:00:00
hivepro
hivepro
Cloud Atlas Exploits Six-Year-Old Flaw to Target Russian Companies
2023-12-28 14:23:55
Russian threat actor UAC-0056 targets European countries
2022-03-18 08:27:31
thn
thn
U.S. DoJ Dismantles Warzone RAT Infrastructure, Arrests Key Operators
2024-02-11 10:54:00
New Agent Tesla Malware Variant Using ZPAQ Compression in Email Attacks
2023-11-21 11:57:00
Multiple Hacker Groups Capitalizing on Ukraine Conflict for Distributing Malware
2022-04-04 11:13:00
malwarebytes
malwarebytes
Microsoft is now disabling Excel 4.0 macros by default
2022-01-24 15:39:51
securelist
securelist
Spam and phishing in 2020
2021-02-15 10:00:38
Spam and phishing in 2018
2019-03-12 10:00:16
Spam and phishing in Q2 2020
2020-08-07 10:00:07
exploitpack
exploitpack
Microsoft Office - OLE Remote Code Execution
2017-11-20 00:00:00
myhack58
myhack58
Wary of the use of the Office vulnerabilities to spread commercial spyware AgentTesla-vulnerability warning-the black bar safety net
2019-05-28 00:00:00
talosblog
talosblog
New HawkEye Reborn Variant Emerges Following Ownership Change
2019-04-16 11:45:39
It's alive: Threat actors cobble together open-source pieces into monstrous Frankenstein campaign
2019-06-05 00:45:28
Loda RAT Grows Up
2020-02-12 12:08:44
metasploit
metasploit
Microsoft Office CVE-2017-11882
2017-11-21 19:47:02
mskb
mskb
Description of the security update for 2007 Microsoft Office Suite: November 28, 2017
2017-11-14 08:00:00
Description of the security update for Office 2010: November 28, 2017
2017-11-14 08:00:00
Description of the security update for Office 2016: November 14, 2017
2017-11-14 08:00:00
mssecure
mssecure
In hot pursuit of elusive threats: AI-driven behavior-based blocking stops attacks in their tracks
2019-10-08 15:00:11
fireeye
fireeye
Suspected Chinese Cyber Espionage Group (TEMP.Periscope) Targeting U.S. Engineering and Maritime Industries
2018-03-16 00:00:00
ics
ics
LokiBot Malware
2020-10-24 12:00:00
openvas
openvas
Microsoft Office 2013 Service Pack 1 Remote Code Execution Vulnerability (KB3162047)
2017-11-15 00:00:00
Microsoft Office 2010 Service Pack 2 Remote Code Execution Vulnerability (KB2553204)
2017-11-15 00:00:00

7.8 High

CVSS3

Attack Vector

LOCAL

Attack Complexity

LOW

Privileges Required

NONE

User Interaction

REQUIRED

Scope

UNCHANGED

Confidentiality Impact

HIGH

Integrity Impact

HIGH

Availability Impact

HIGH

CVSS:3.0/AV:L/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H

7.9 High

AI Score

Confidence

High

9.3 High

CVSS2

Access Vector

NETWORK

Access Complexity

MEDIUM

Authentication

NONE

Confidentiality Impact

COMPLETE

Integrity Impact

COMPLETE

Availability Impact

COMPLETE

AV:N/AC:M/Au:N/C:C/I:C/A:C

0.004 Low

EPSS

Percentile

73.6%

JSON
Related for PRION:CVE-2017-11884
threatpost156attackerkb1cvelist2cve2prion1zdi1mscve1symantec1checkpoint_advisories1hivepro2thn5malwarebytes1securelist10exploitpack1myhack581talosblog4metasploit1mskb3mssecure1fireeye1ics1openvas2