PT-2017-1656 · Microsoft · Office Compatibility Pack+3

Publicado 2017-03-17 · Atualizado 2017-07-12 · CVE-2017-0006

Positive Technologies (AI Summary)

CVSS v2.0

9.3

Alta

Vetor base

AV:N/AC:M/Au:N/C:C/I:C/A:C

Name of the Vulnerable Software and Affected Versions Microsoft Office Compatibility Pack (affected versions not specified) Microsoft Excel (affected versions not specified) Microsoft SharePoint Server (affected versions not specified) Microsoft Excel Viewer (affected versions not specified)

Description The issue is caused by a buffer overflow in memory, allowing a remote attacker to execute arbitrary code or cause a denial of service (memory corruption) by using a specially crafted document.

Recommendations For Microsoft Office Compatibility Pack, update to a version that includes a fix for the buffer overflow issue. For Microsoft Excel, update to a version that includes a fix for the buffer overflow issue. For Microsoft SharePoint Server, update to a version that includes a fix for the buffer overflow issue. For Microsoft Excel Viewer, update to a version that includes a fix for the buffer overflow issue. As a temporary workaround, consider avoiding the use of specially crafted documents until a patch is available.

Correção

RCE

DoS

Buffer Overflow

Enumeração de Fraquezas

CWE-119

Identificadores relacionados

BDU:2017-00809

CVE-2017-0006

Produtos afetados

Office Excel

Excel Viewer

Office Compatibility Pack

Sharepoint Server

Referências · 6

• http://securityfocus.com/bid/96740 · Nota
• https://osv.dev/vulnerability/CVE-2017-0006 · Aviso do Fabricante
• http://securitytracker.com/id/1038010 · Nota
• https://portal.msrc.microsoft.com/en-US/security-guidance/advisory/CVE-2017-0006 · Aviso do Fabricante
• https://nvd.nist.gov/vuln/detail/CVE-2017-0006 · Nota de Segurança
• https://bdu.fstec.ru/vul/2017-00809 · Nota de Segurança