PT-2017-12315 · Microsoft · Office 2013 Sp1+2

Publicado 2017-12-12 · Atualizado 2018-10-30 · CVE-2017-11934

Positive Technologies (AI Summary)

CVSS v3.1

5.5

Média

Vetor base

AV:L/AC:L/PR:N/UI:R/S:U/C:H/I:N/A:N

Name of the Vulnerable Software and Affected Versions Microsoft Office versions 2013 RT SP1 through 2016

Description An information disclosure issue exists due to the improper handling of objects in memory by Microsoft Office, which could allow an attacker to compromise a user's computer or data by exploiting the vulnerability.

Recommendations For Microsoft Office 2013 RT SP1, update to a version that fixes the information disclosure issue. For Microsoft Office 2013 SP1, apply the necessary patch to resolve the memory handling issue. For Microsoft Office 2016, ensure that all security updates are applied to mitigate the risk of information disclosure.

Correção

Information Disclosure

Enumeração de Fraquezas

CWE-200

Identificadores relacionados

CVE-2017-11934

Produtos afetados

Office 2013 Sp1

Office 2016

Office

Referências · 5

• https://portal.msrc.microsoft.com/en-US/security-guidance/advisory/CVE-2017-11934 · Aviso do Fabricante
• http://securityfocus.com/bid/102064 · Nota
• https://nvd.nist.gov/vuln/detail/CVE-2017-11934 · Nota de Segurança
• https://osv.dev/vulnerability/CVE-2017-11934 · Aviso do Fabricante
• http://securitytracker.com/id/1039998 · Nota