[Forgot Password]
Login  Register Subscribe

30389

 
 

423868

 
 

244411

 
 

909

 
 

193363

 
 

277

Paid content will be excluded from the download.


Download | Alert*
CVE
view JSON

CVE-2017-11826Date: (C)2017-10-18   (M)2023-12-22


Microsoft Office 2010, SharePoint Enterprise Server 2010, SharePoint Server 2010, Web Applications, Office Web Apps Server 2010 and 2013, Word Viewer, Word 2007, 2010, 2013 and 2016, Word Automation Services, and Office Online Server allow remote code execution when the software fails to properly handle objects in memory.

CVSS Score and Metrics +CVSS Score and Metrics -

CVSS V3 Severity:CVSS V2 Severity:
CVSS Score : 7.8CVSS Score : 9.3
Exploit Score: 1.8Exploit Score: 8.6
Impact Score: 5.9Impact Score: 10.0
 
CVSS V3 Metrics:CVSS V2 Metrics:
Attack Vector: LOCALAccess Vector: NETWORK
Attack Complexity: LOWAccess Complexity: MEDIUM
Privileges Required: NONEAuthentication: NONE
User Interaction: REQUIREDConfidentiality: COMPLETE
Scope: UNCHANGEDIntegrity: COMPLETE
Confidentiality: HIGHAvailability: COMPLETE
Integrity: HIGH 
Availability: HIGH 
  
Reference:
BID-101219
SECTRACK-1039541
https://0patch.blogspot.com/2017/11/0patching-pretty-nasty-microsoft-word.html
https://portal.msrc.microsoft.com/en-US/security-guidance/advisory/CVE-2017-11826
https://securingtomorrow.mcafee.com/mcafee-labs/analyzing-microsoft-office-zero-day-exploit-cve-2017-11826-memory-corruption-vulnerability/
https://www.tarlogic.com/en/blog/exploiting-word-cve-2017-11826/

CPE    10
cpe:/a:microsoft:word:2016
cpe:/a:microsoft:word_viewer
cpe:/a:microsoft:sharepoint_server:2010
cpe:/a:microsoft:office_web_apps:2013
...
CWE    1
CWE-119
OVAL    13
oval:org.secpod.oval:def:42389
oval:org.secpod.oval:def:42388
oval:org.secpod.oval:def:42393
oval:org.secpod.oval:def:42392
...

© SecPod Technologies