CVE-2017-0199 - Microsoft Office 2007 SP3, Microsoft Office 2010 SP2, Microsoft Office 2013 SP1, Microsoft Office 20

CVE-2017-0199

Summary

Microsoft Office 2007 SP3, Microsoft Office 2010 SP2, Microsoft Office 2013 SP1, Microsoft Office 2016, Microsoft Windows Vista SP2, Windows Server 2008 SP2, Windows 7 SP1, Windows 8.1 allow remote attackers to execute arbitrary code via a crafted document, aka "Microsoft Office/WordPad Remote Code Execution Vulnerability w/Windows API."

References

Vulnerable Configurations

cpe:2.3:a:microsoft:office:2007:sp3:*:*:*:*:*:*
cpe:2.3:a:microsoft:office:2007:sp3:*:*:*:*:*:*
cpe:2.3:a:microsoft:office:2013:sp1:*:*:*:*:*:*
cpe:2.3:a:microsoft:office:2013:sp1:*:*:*:*:*:*
cpe:2.3:a:microsoft:office:2010:sp2:*:*:*:*:*:*
cpe:2.3:a:microsoft:office:2010:sp2:*:*:*:*:*:*
cpe:2.3:o:microsoft:windows_server_2008:-:sp2:*:*:*:*:*:*
cpe:2.3:o:microsoft:windows_server_2008:-:sp2:*:*:*:*:*:*
cpe:2.3:o:microsoft:windows_server_2008:r2:sp1:*:*:*:*:*:*
cpe:2.3:o:microsoft:windows_server_2008:r2:sp1:*:*:*:*:*:*
cpe:2.3:o:microsoft:windows_7:-:sp1:*:*:*:*:*:*
cpe:2.3:o:microsoft:windows_7:-:sp1:*:*:*:*:*:*
cpe:2.3:o:microsoft:windows_vista:-:sp2:*:*:*:*:*:*
cpe:2.3:o:microsoft:windows_vista:-:sp2:*:*:*:*:*:*
cpe:2.3:o:microsoft:windows_server_2012:-:*:*:*:*:*:*:*
cpe:2.3:o:microsoft:windows_server_2012:-:*:*:*:*:*:*:*
cpe:2.3:a:microsoft:office:2016:-:*:*:*:*:*:*
cpe:2.3:a:microsoft:office:2016:-:*:*:*:*:*:*
cpe:2.3:a:philips:intellispace_portal:8.0:*:*:*:*:*:*:*
cpe:2.3:a:philips:intellispace_portal:8.0:*:*:*:*:*:*:*
cpe:2.3:a:philips:intellispace_portal:7.0:*:*:*:*:*:*:*
cpe:2.3:a:philips:intellispace_portal:7.0:*:*:*:*:*:*:*

CVSS

Base:	9.3 (as of 24-07-2024 - 17:11)
Impact:
Exploitability:

CWE

NVD-CWE-noinfo

CAPEC

Access

Vector	Complexity	Authentication
NETWORK	MEDIUM	NONE

Impact

Confidentiality	Integrity	Availability
COMPLETE	COMPLETE	COMPLETE

cvss-vector via4

AV:N/AC:M/Au:N/C:C/I:C/A:C

refmap via4

bid	97498
confirm	https://portal.msrc.microsoft.com/en-US/security-guidance/advisory/CVE-2017-0199
exploit-db	41894 41934 42995
misc	http://rewtin.blogspot.nl/2017/04/cve-2017-0199-practical-exploitation-poc.html https://blog.nviso.be/2017/04/12/analysis-of-a-cve-2017-0199-malicious-rtf-document/ https://ics-cert.us-cert.gov/advisories/ICSMA-18-058-02 https://www.fireeye.com/blog/threat-research/2017/04/cve-2017-0199_useda.html https://www.mdsec.co.uk/2017/04/exploiting-cve-2017-0199-hta-handler-vulnerability/
sectrack	1038224

saint via4

bid	97498
description	Microsoft Word and WordPad RTF HTA handler command execution
id	win_patch_office2007,win_patch_office2010,win_patch_office2013,win_patch_office2016
title	microsoft_word_wordpad_rtf
type	client

Last major update

24-07-2024 - 17:11

Published

12-04-2017 - 14:59

Last modified

24-07-2024 - 17:11