CVE-2017-8511 A remote code execution vulnerability exists in Microsoft Office when the software fails to properly handle objects in memory, aka "Office Remote Code Execution Vulnerability". This CVE ID is unique f...
HighCVSS 7.8
EPSS 20.6%
- Published
- Updated
- Exploit status
- No public exploit known
Description
A remote code execution vulnerability exists in Microsoft Office when the software fails to properly handle objects in memory, aka "Office Remote Code Execution Vulnerability". This CVE ID is unique from CVE-2017-8509, CVE-2017-8510, CVE-2017-8512, CVE-2017-0260, and CVE-2017-8506.
Affected products
| Product | Affected versions | Fixed in |
|---|---|---|
| Microsoft office | = 2010-sp1 | No fix listed |
| Microsoft office | = 2010-sp2 | No fix listed |
| Microsoft office | = 2013-sp1 | No fix listed |
| Microsoft office | = 2016 | No fix listed |
| Microsoft Office Online Server | = 2016 | No fix listed |
| Microsoft office web apps | = 2010-sp2 | No fix listed |
| Microsoft office web apps server | = 2013-sp1 | No fix listed |
| Microsoft powerpoint for mac | = 2011 | No fix listed |
| Microsoft powerpoint for mac | = 2016 | No fix listed |
| Microsoft sharepoint server | = 2013-sp1 | No fix listed |
| Microsoft sharepoint server | = 2016 | No fix listed |
| Microsoft Office | = Microsoft Office 2010 Service Pack 2, Microsoft Office 2013 Service Pack 1, Microsoft Office 2016, Microsoft Office Online Server 2016, Microsoft Office Web Apps Server 2010 Service Pack 2, M | No fix listed |
References
- 98815 third-party-advisory vdb-entry
- portal.msrc.microsoft.com mitigation patch vendor-advisory