CVE-2017-8501 Microsoft Office allows a remote code execution vulnerability due to the way that it handles objects in memory, aka "Microsoft Office Memory Corruption Vulnerability". This CVE ID is unique from CVE-2...
HighCVSS 7.8
EPSS 22.5%
- Published
- Updated
- Exploit status
- No public exploit known
Description
Microsoft Office allows a remote code execution vulnerability due to the way that it handles objects in memory, aka "Microsoft Office Memory Corruption Vulnerability". This CVE ID is unique from CVE-2017-8502.
Affected products
| Product | Affected versions | Fixed in |
|---|---|---|
| Microsoft excel | = 2007-sp3 | No fix listed |
| Microsoft excel | = 2010-sp2 | No fix listed |
| Microsoft excel | = 2013-sp1 | No fix listed |
| Microsoft excel | = 2016 | No fix listed |
| Microsoft excel viewer | = 2007-sp3 | No fix listed |
| Microsoft office | = 2011 | No fix listed |
| Microsoft office | = 2016 | No fix listed |
| Microsoft office compatibility pack | All versions | No fix listed |
| Microsoft Office Online Server | = 2016 | No fix listed |
| Microsoft sharepoint server | = 2010-sp2 | No fix listed |
| Microsoft sharepoint server | = 2013 | No fix listed |
| Microsoft Office 2007 SP3, Microsoft Excel Viewer 2007 SP3, Microsoft Office 2010 SP2, Excel Services on Microsoft SharePoint Server 2010 SP1, Microsoft Office for Mac 2011, Microsoft Excel 2013 SP1, Microsoft Excel 2013 RT SP1, Microsoft SharePoint Enter | = Microsoft Office | No fix listed |
References
- 99441 third-party-advisory vdb-entry
- 1038851 third-party-advisory vdb-entry
- portal.msrc.microsoft.com patch vendor-advisory