cnvd-2017-06336
Vulnerability from cnvd
Title
Microsoft Office远程代码执行漏洞(CNVD-2017-06336)
Description
Microsoft Office是微软公司开发的一套基于Windows操作系统的办公软件套装。
Microsoft Office存在远程代码执行漏洞。攻击者可以通过创建一个特制文件,利用该漏洞在目标用户的系统上执行任意代码。
Severity
高
VLAI Severity ?
Patch Name
Microsoft Office远程代码执行漏洞(CNVD-2017-06336)的补丁
Patch Description
Microsoft Office是微软公司开发的一套基于Windows操作系统的办公软件套装。
Microsoft Office存在远程代码执行漏洞。攻击者可以通过创建一个特制文件,利用该漏洞在目标用户的系统上执行任意代码。目前,供应商发布了安全公告及相关补丁信息,修复了此漏洞。
Formal description
用户可参考如下厂商提供的安全补丁以修复该漏洞: portal.msrc.microsoft.com/en-us/security-guidance/releasenotedetail/bc365363-f51e-e711-80da-000d3a32fc99 (Links to External Site)
Reference
http://securitytracker.com/id/1038443
Impacted products
Name | ['Microsoft Office Word 2007 SP3', 'Microsoft Office Office for Mac 2011', 'Microsoft Office 2016 for Mac', 'Microsoft Office Office Web Apps 2010 SP2', 'Microsoft Office 2016', 'Microsoft Office Office Word Viewer', 'Microsoft Office Office Compatibility Pack SP3', 'Microsoft Office Office Web Apps 2010 SP2', 'Microsoft Office Office Word Viewer'] |
---|
{ "cves": { "cve": { "cveNumber": "CVE-2017-0254", "cveUrl": "http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2017-0254" } }, "description": "Microsoft Office\u662f\u5fae\u8f6f\u516c\u53f8\u5f00\u53d1\u7684\u4e00\u5957\u57fa\u4e8eWindows\u64cd\u4f5c\u7cfb\u7edf\u7684\u529e\u516c\u8f6f\u4ef6\u5957\u88c5\u3002\r\n\r\nMicrosoft Office\u5b58\u5728\u8fdc\u7a0b\u4ee3\u7801\u6267\u884c\u6f0f\u6d1e\u3002\u653b\u51fb\u8005\u53ef\u4ee5\u901a\u8fc7\u521b\u5efa\u4e00\u4e2a\u7279\u5236\u6587\u4ef6\uff0c\u5229\u7528\u8be5\u6f0f\u6d1e\u5728\u76ee\u6807\u7528\u6237\u7684\u7cfb\u7edf\u4e0a\u6267\u884c\u4efb\u610f\u4ee3\u7801\u3002", "discovererName": "unknown", "formalWay": "\u7528\u6237\u53ef\u53c2\u8003\u5982\u4e0b\u5382\u5546\u63d0\u4f9b\u7684\u5b89\u5168\u8865\u4e01\u4ee5\u4fee\u590d\u8be5\u6f0f\u6d1e\uff1a\r\nportal.msrc.microsoft.com/en-us/security-guidance/releasenotedetail/bc365363-f51e-e711-80da-000d3a32fc99 (Links to External Site)", "isEvent": "\u901a\u7528\u8f6f\u786c\u4ef6\u6f0f\u6d1e", "number": "CNVD-2017-06336", "openTime": "2017-05-11", "patchDescription": "Microsoft Office\u662f\u5fae\u8f6f\u516c\u53f8\u5f00\u53d1\u7684\u4e00\u5957\u57fa\u4e8eWindows\u64cd\u4f5c\u7cfb\u7edf\u7684\u529e\u516c\u8f6f\u4ef6\u5957\u88c5\u3002\r\n\r\nMicrosoft Office\u5b58\u5728\u8fdc\u7a0b\u4ee3\u7801\u6267\u884c\u6f0f\u6d1e\u3002\u653b\u51fb\u8005\u53ef\u4ee5\u901a\u8fc7\u521b\u5efa\u4e00\u4e2a\u7279\u5236\u6587\u4ef6\uff0c\u5229\u7528\u8be5\u6f0f\u6d1e\u5728\u76ee\u6807\u7528\u6237\u7684\u7cfb\u7edf\u4e0a\u6267\u884c\u4efb\u610f\u4ee3\u7801\u3002\u76ee\u524d\uff0c\u4f9b\u5e94\u5546\u53d1\u5e03\u4e86\u5b89\u5168\u516c\u544a\u53ca\u76f8\u5173\u8865\u4e01\u4fe1\u606f\uff0c\u4fee\u590d\u4e86\u6b64\u6f0f\u6d1e\u3002", "patchName": "Microsoft Office\u8fdc\u7a0b\u4ee3\u7801\u6267\u884c\u6f0f\u6d1e\uff08CNVD-2017-06336\uff09\u7684\u8865\u4e01", "products": { "product": [ "Microsoft Office Word 2007 SP3", "Microsoft Office Office for Mac 2011", "Microsoft Office 2016 for Mac", "Microsoft Office Office Web Apps 2010 SP2", "Microsoft Office 2016", "Microsoft Office Office Word Viewer", "Microsoft Office Office Compatibility Pack SP3", "Microsoft Office Office Web Apps 2010 SP2", "Microsoft Office Office Word Viewer" ] }, "referenceLink": "http://securitytracker.com/id/1038443", "serverity": "\u9ad8", "submitTime": "2017-05-11", "title": "Microsoft Office\u8fdc\u7a0b\u4ee3\u7801\u6267\u884c\u6f0f\u6d1e\uff08CNVD-2017-06336\uff09" }
Loading…
Loading…
Sightings
Author | Source | Type | Date |
---|
Nomenclature
- Seen: The vulnerability was mentioned, discussed, or seen somewhere by the user.
- Confirmed: The vulnerability is confirmed from an analyst perspective.
- Published Proof of Concept: A public proof of concept is available for this vulnerability.
- Exploited: This vulnerability was exploited and seen by the user reporting the sighting.
- Patched: This vulnerability was successfully patched by the user reporting the sighting.
- Not exploited: This vulnerability was not exploited or seen by the user reporting the sighting.
- Not confirmed: The user expresses doubt about the veracity of the vulnerability.
- Not patched: This vulnerability was not successfully patched by the user reporting the sighting.
Loading…
Loading…