CVE-2017-11877 Microsoft Excel 2007 Service Pack 3, Microsoft Excel 2010 Service Pack 2, Microsoft Excel 2013 Service Pack 1, Microsoft Excel 2013 RT Service Pack 1, Microsoft Excel 2016, Microsoft Office Compatibil...
MediumCVSS 5.5
EPSS 4.5%
- Published
- Updated
- Exploit status
- No public exploit known
Description
Microsoft Excel 2007 Service Pack 3, Microsoft Excel 2010 Service Pack 2, Microsoft Excel 2013 Service Pack 1, Microsoft Excel 2013 RT Service Pack 1, Microsoft Excel 2016, Microsoft Office Compatibility Pack Service Pack 3, Microsoft Excel Viewer 2007 Service Pack 3, and Microsoft Excel 2016 for Mac allow a security feature bypass by not enforcing macro settings on an Excel document, aka "Microsoft Excel Security Feature Bypass Vulnerability".
Affected products
| Product | Affected versions | Fixed in |
|---|---|---|
| Microsoft excel | = 2007 | No fix listed |
| Microsoft excel | = 2010 | No fix listed |
| Microsoft excel | = 2013 | No fix listed |
| Microsoft excel | = 2013-sp1 | No fix listed |
| Microsoft excel | = 2016 | No fix listed |
| Microsoft excel viewer | = 2007-sp3 | No fix listed |
| Microsoft office compatibility pack | All versions | No fix listed |
| Microsoft Office | = Microsoft Excel 2007 Service Pack 3, Microsoft Excel 2010 Service Pack 2, Microsoft Excel 2013 Service Pack 1, Microsoft Excel 2013 RT Service Pack 1, Microsoft Excel 2016, Microsoft Office C | No fix listed |
References
- 101747 third-party-advisory vdb-entry
- 1039783 third-party-advisory vdb-entry
- portal.msrc.microsoft.com issue-tracking patch vendor-advisory