CVE Vulnerabilities

CVE-2017-8509

Published: Jun 15, 2017 | Modified: Oct 03, 2019
CVSS 3.x
8.8
HIGH
Source:
NVD
CVSS:3.0/AV:N/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H
CVSS 2.x
9.3 HIGH
AV:N/AC:M/Au:N/C:C/I:C/A:C
RedHat/V2
RedHat/V3
Ubuntu

A remote code execution vulnerability exists in Microsoft Office when the software fails to properly handle objects in memory, aka Office Remote Code Execution Vulnerability. This CVE ID is unique from CVE-2017-8510, CVE-2017-8511, CVE-2017-8512, CVE-2017-0260, and CVE-2017-8506.

Affected Software

Name Vendor Start Version End Version
Office Microsoft 2007-sp3 (including) 2007-sp3 (including)
Office Microsoft 2010-sp2 (including) 2010-sp2 (including)
Office Microsoft 2013-sp1 (including) 2013-sp1 (including)
Office Microsoft 2016 (including) 2016 (including)
Office_compatibility_pack Microsoft –sp3 (including) –sp3 (including)
Office_web_apps Microsoft 2010 (including) 2010 (including)
Office_web_apps_server Microsoft 2013 (including) 2013 (including)
Onenote Microsoft 2010 (including) 2010 (including)
Sharepoint_server Microsoft 2010-sp2 (including) 2010-sp2 (including)
Sharepoint_server Microsoft 2013-sp1 (including) 2013-sp1 (including)
Sharepoint_server Microsoft 2016 (including) 2016 (including)
Word Microsoft 2007-sp3 (including) 2007-sp3 (including)
Word Microsoft 2010-sp2 (including) 2010-sp2 (including)
Word Microsoft 2013-sp1 (including) 2013-sp1 (including)
Word Microsoft 2016 (including) 2016 (including)
Word_for_mac Microsoft 2016 (including) 2016 (including)

References