PT-2017-18382 · Microsoft · Office+1

Pedro Gallegos · Published 2017-06-13 · Updated 2019-10-03 · CVE-2017-8508

Positive Technologies (AI Summary)

CVSS v3.1

5.5

Medium

Base vector

AV:L/AC:L/PR:N/UI:R/S:U/C:N/I:H/A:N

Name of the Vulnerable Software and Affected Versions Microsoft Office (affected versions not specified)

Description A security feature bypass issue exists due to improper handling of file formats. This issue does not allow arbitrary code execution on its own but can be exploited in conjunction with another vulnerability, such as a remote code execution vulnerability, to run arbitrary code. An attacker would need to convince a user to open a specially crafted file with an affected version of Microsoft Office software.

Recommendations At the moment, there is no information about a newer version that contains a fix for this vulnerability.

Related Identifiers

CVE-2017-8508

Affected Products

Office

Outlook

References · 4

• https://nvd.nist.gov/vuln/detail/CVE-2017-8508 · Security Note
• https://osv.dev/vulnerability/CVE-2017-8508 · Vendor Advisory
• https://portal.msrc.microsoft.com/en-US/security-guidance/advisory/CVE-2017-8508 · Vendor Advisory
• http://securityfocus.com/bid/98828 · Note