Lucene search
K
Database
Vendors
Products
Years
CVSS
Scanner
Agent Scanning
API Scanning
Manual Audit
Perimeter Scanner
Scanning
Projects
Email
Webhook
Plugins
Resources
Documents
Blog
Glossary
FAQ
Pricing
Contacts
About Us
Partners
Branding Guideline
cve[email protected]CVE-2017-0106
HistoryApr 12, 2017 - 2:59 p.m.

CVE-2017-0106

2017-04-1214:59:00
CWE-119
[email protected]
web.nvd.nist.gov
61
cve-2017-0106
microsoft excel
microsoft outlook
remote code execution
denial of service
memory corruption

7.8 High

CVSS3

Attack Vector

LOCAL

Attack Complexity

LOW

Privileges Required

NONE

User Interaction

REQUIRED

Scope

UNCHANGED

Confidentiality Impact

HIGH

Integrity Impact

HIGH

Availability Impact

HIGH

CVSS:3.0/AV:L/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H

7.7 High

AI Score

Confidence

High

9.3 High

CVSS2

Access Vector

NETWORK

Access Complexity

MEDIUM

Authentication

NONE

Confidentiality Impact

COMPLETE

Integrity Impact

COMPLETE

Availability Impact

COMPLETE

AV:N/AC:M/Au:N/C:C/I:C/A:C

0.108 Low

EPSS

Percentile

95.1%

JSON

Microsoft Excel 2007 SP3, Microsoft Outlook 2010 SP2, Microsoft Outlook 2013 SP1, and Microsoft Outlook 2016 allow remote attackers to execute arbitrary code or cause a denial of service (memory corruption) via a crafted document, aka “Microsoft Office Memory Corruption Vulnerability.”

Related

cvelist 1
checkpoint_advisories 1
symantec 1
prion 1
mscve 1
openvas 4
mskb 4
myhack58 1
kaspersky 1
nessus 2
cvelist
cvelist
CVE-2017-0106
2017-04-12 14:00:00
checkpoint_advisories
checkpoint_advisories
Microsoft Outlook Remote Code Execution (CVE-2017-0106)
2017-04-11 00:00:00
symantec
symantec
Microsoft Outlook CVE-2017-0106 Remote Code Execution Vulnerability
2017-04-11 00:00:00
prion
prion
Memory corruption
2017-04-12 14:59:00
mscve
mscve
Microsoft Outlook Remote Code Execution Vulnerability
2017-04-11 07:00:00
openvas
openvas
Microsoft Office Outlook Security Bypass and Remote Code Execution Vulnerabilities (KB3178664)
2017-04-12 00:00:00
Microsoft Office Outlook Security Bypass and Remote Code Execution Vulnerabilities (KB3127890)
2017-04-12 00:00:00
Microsoft Office Outlook Security Bypass and Remote Code Execution Vulnerabilities (KB3172519)
2017-04-12 00:00:00
mskb
mskb
Security update 2017-04-11
2017-04-11 07:00:00
Description of the security update for Outlook 2010: April 11, 2017
2017-04-11 07:00:00
Description of the security update for Outlook 2013: April 11, 2017
2017-04-11 07:00:00
myhack58
myhack58
Recently being a hot Word 0day vulnerability has been used for malware spreading and the country attack-vulnerability warning-the black bar safety net
2017-04-15 00:00:00
kaspersky
kaspersky
KLA11055 Multiple vulnerabilities in Microsoft Office
2017-04-11 00:00:00
nessus
nessus
Security Update for Microsoft Office Products (April 2017) (Petya)
2017-04-12 00:00:00
Security Updates for Outlook (September 2017)
2017-09-25 00:00:00

7.8 High

CVSS3

Attack Vector

LOCAL

Attack Complexity

LOW

Privileges Required

NONE

User Interaction

REQUIRED

Scope

UNCHANGED

Confidentiality Impact

HIGH

Integrity Impact

HIGH

Availability Impact

HIGH

CVSS:3.0/AV:L/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H

7.7 High

AI Score

Confidence

High

9.3 High

CVSS2

Access Vector

NETWORK

Access Complexity

MEDIUM

Authentication

NONE

Confidentiality Impact

COMPLETE

Integrity Impact

COMPLETE

Availability Impact

COMPLETE

AV:N/AC:M/Au:N/C:C/I:C/A:C

0.108 Low

EPSS

Percentile

95.1%

JSON
Related for CVE-2017-0106
cvelist1checkpoint_advisories1symantec1prion1mscve1openvas4mskb4myhack581kaspersky1nessus2