CVEvulnerability

CVE-2017-8509

8.8 HIGH Published 2017-06-15 Modified 2026-10-15 Official page ↗

Status: Modified
Published: 2017-06-15
Last modified: 2026-10-15
Assigner: [email protected]
CVSS 3.0 ([email protected]): 8.8 HIGH — CVSS:3.0/AV:N/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H
CVSS 2.0 ([email protected]): 9.3 HIGH — AV:N/AC:M/Au:N/C:C/I:C/A:C

Description

A remote code execution vulnerability exists in Microsoft Office when the software fails to properly handle objects in memory, aka "Office Remote Code Execution Vulnerability". This CVE ID is unique from CVE-2017-8510, CVE-2017-8511, CVE-2017-8512, CVE-2017-0260, and CVE-2017-8506.

Affected configurations

• microsoft office 2007 • microsoft office 2010 • microsoft office 2013 • microsoft office 2016 • microsoft office compatibility pack • microsoft office web apps 2010 • microsoft office web apps server 2013 • microsoft onenote 2010 • microsoft sharepoint server 2010 • microsoft sharepoint server 2013 • microsoft sharepoint server 2016 • microsoft word 2007 • microsoft word 2010 • microsoft word 2013 • microsoft word 2016 • microsoft word for mac 2016

References

http://www.securityfocus.com/bid/98812 Third Party Advisory, VDB Entry
https://portal.msrc.microsoft.com/en-US/security-guidance/advisory/CVE-2017-8509 Mitigation, Patch, Vendor Advisory
http://www.securityfocus.com/bid/98812 Third Party Advisory, VDB Entry
https://portal.msrc.microsoft.com/en-US/security-guidance/advisory/CVE-2017-8509 Mitigation, Patch, Vendor Advisory