CVE-2017-0199 Microsoft Office 2007 SP3, Microsoft Office 2010 SP2, Microsoft Office 2013 SP1, Microsoft Office 2016, Microsoft Windows Vista SP2, Windows Server 2008 SP2, Windows 7 SP1, Windows 8.1 allow remote at...
HighCVSS 7.8
EPSS 99.5%
CISA KEV
added 2021-11-03 · due 2022-05-03
Ransomware
Exploited in the wild
Framework module
Public exploit
PoC
- Published
- Updated
- Exploit status
- Exploited in the wild (confirmed)
Description
Microsoft Office 2007 SP3, Microsoft Office 2010 SP2, Microsoft Office 2013 SP1, Microsoft Office 2016, Microsoft Windows Vista SP2, Windows Server 2008 SP2, Windows 7 SP1, Windows 8.1 allow remote attackers to execute arbitrary code via a crafted document, aka "Microsoft Office/WordPad Remote Code Execution Vulnerability w/Windows API."
CISA Known Exploited Vulnerability
- Date added
- 2021-11-03
- Due date (FCEB)
- 2022-05-03
- Ransomware use
- Known
Required action
Apply updates per vendor instructions.
Affected products
| Product | Affected versions | Fixed in |
|---|---|---|
| Microsoft office | = 2007-sp3 | No fix listed |
| Microsoft office | = 2010-sp2 | No fix listed |
| Microsoft office | = 2013-sp1 | No fix listed |
| Microsoft office | = 2016 | No fix listed |
| Microsoft windows 7 | All versions | No fix listed |
| Microsoft windows server 2008 | All versions | No fix listed |
| Microsoft windows server 2008 | = r2-sp1 | No fix listed |
| Microsoft Windows Server 2012 | All versions | No fix listed |
| Microsoft windows vista | All versions | No fix listed |
| Philips intellispace portal | = 7.0 | No fix listed |
| Philips intellispace portal | = 8.0 | No fix listed |
| Microsoft Office/WordPad | = Office 2007 SP3, Microsoft Office 2010 SP2, Microsoft Office 2013 SP1, Microsoft Office 2016, Microsoft Windows Vista SP2, Windows Server 2008 SP2, Windows 7 SP1, and Windows 8.1 | No fix listed |
References
- rewtin.blogspot.nl exploit third-party-advisory
- 97498 broken-link third-party-advisory vdb-entry
- 1038224 broken-link third-party-advisory vdb-entry
- blog.nviso.be exploit third-party-advisory
- ics-cert.us-cert.gov third-party-advisory us-government-resource
- portal.msrc.microsoft.com patch vendor-advisory
- 41894 exploit third-party-advisory vdb-entry
- 41934 exploit third-party-advisory vdb-entry
- 42995 exploit third-party-advisory vdb-entry
- www.fireeye.com broken-link exploit third-party-advisory
- www.mdsec.co.uk exploit third-party-advisory
- www.cisa.gov government-resource us-government-resource