CVE-2017-0243 Microsoft Office allows a remote code execution vulnerability due to the way that it handles objects in memory, aka "Microsoft Office Remote Code Execution Vulnerability". This CVE ID is unique from C...
HighCVSS 7.8
EPSS 21.5%
- Published
- Updated
- Exploit status
- No public exploit known
Description
Microsoft Office allows a remote code execution vulnerability due to the way that it handles objects in memory, aka "Microsoft Office Remote Code Execution Vulnerability". This CVE ID is unique from CVE-2017-8570.
Affected products
| Product | Affected versions | Fixed in |
|---|---|---|
| Microsoft business productivity servers | = 2010-sp2 | No fix listed |
| Microsoft office | = 2007-sp3 | No fix listed |
| Microsoft office | = 2010-sp2 | No fix listed |
| Microsoft web applications | = 2010-sp2 | No fix listed |
| Microsoft Office 2007 SP2 and SP3, Microsoft Office 2010 SP2, Microsoft Office Web Apps 2010 SP2, and Microsoft Business Productivity Servers 2010 SP2. | = Microsoft Office | No fix listed |
References
- 99446 third-party-advisory vdb-entry
- 1038851 third-party-advisory vdb-entry
- portal.msrc.microsoft.com patch vendor-advisory