PT-2017-18382 · Microsoft · Office+1

Pedro Gallegos · Publicado 2017-06-13 · Atualizado 2019-10-03 · CVE-2017-8508

Positive Technologies (AI Summary)

CVSS v3.1

5.5

Média

Vetor base

AV:L/AC:L/PR:N/UI:R/S:U/C:N/I:H/A:N

Name of the Vulnerable Software and Affected Versions Microsoft Office (affected versions not specified)

Description A security feature bypass issue exists due to improper handling of file formats. This issue does not allow arbitrary code execution on its own but can be exploited in conjunction with another vulnerability, such as a remote code execution vulnerability, to run arbitrary code. An attacker would need to convince a user to open a specially crafted file with an affected version of Microsoft Office software.

Recommendations At the moment, there is no information about a newer version that contains a fix for this vulnerability.

Identificadores relacionados

CVE-2017-8508

Produtos afetados

Office

Outlook

Referências · 4

• https://nvd.nist.gov/vuln/detail/CVE-2017-8508 · Nota de Segurança
• https://osv.dev/vulnerability/CVE-2017-8508 · Aviso do Fabricante
• http://securityfocus.com/bid/98828 · Nota
• https://portal.msrc.microsoft.com/en-US/security-guidance/advisory/CVE-2017-8508 · Aviso do Fabricante