PT-2017-2153 · Microsoft · Office

Genwei Jiang + 1 · Published 2017-05-09 · Updated 2025-02-11 · CVE-2017-0261

Positive Technologies (AI Summary)

CVSS v2.0

9.3

High

Base vector

AV:N/AC:M/Au:N/C:C/I:C/A:C

Name of the Vulnerable Software and Affected Versions Microsoft Office versions 2010 through 2016

Description The issue exists due to insufficient input validation in Microsoft Office, allowing a remote attacker to execute arbitrary code. Exploitation can occur when a user opens a specially crafted file, such as an EPS file with a malformed graphic image, or inserts a malformed graphic image into an Office file. Such files can also be attached to emails. Successful exploitation can grant the attacker control over the system.

Recommendations For Microsoft Office versions 2010 through 2016, apply the official fix to resolve the issue. As a temporary workaround, consider avoiding the use of specially crafted EPS files and restricting the insertion of graphic images from untrusted sources into Office files until a patch is applied.

Exploit

Fix

RCE

Use After Free

Weakness Enumeration

CWE-416

CWE-20

Related Identifiers

BDU:2017-01346

CVE-2017-0261

Affected Products

Office

References · 12

• 🔥 https://github.com/kcufId/eps-CVE-2017-0261 · Exploit
• https://osv.dev/vulnerability/CVE-2017-0261 · Vendor Advisory
• https://bdu.fstec.ru/vul/2017-01346 · Security Note
• https://portal.msrc.microsoft.com/en-US/security-guidance/advisory/CVE-2017-0261 · Vendor Advisory
• https://nvd.nist.gov/vuln/detail/CVE-2017-0261 · Security Note
• https://cisa.gov/known-exploited-vulnerabilities-catalog?field_cve=CVE-2017-0261 · Note
• http://securitytracker.com/id/1038444 · Note
• http://securityfocus.com/bid/98104 · Note
• https://t.me/aptreports/8197 · Telegram Post
• https://t.me/cvenotify/110870 · Telegram Post
• https://t.me/cvenotify/110869 · Telegram Post
• https://t.me/cvenotify/86395 · Telegram Post