CVE-2017-11774

🗓️ 13 Oct 2017 13:00:00Reported by microsoftType

Microsoft Outlook 2010-2016 security bypass issu

Reporter	Title	Published	Views	Family All 37
ATTACKERKB	CVE-2017-11774	13 Oct 201700:00	–	attackerkb
BDU FSTEC	The vulnerability of the Microsoft Outlook email client, related to incorrect handling of objects in memory, allows a hacker to bypass security restrictions and execute arbitrary commands.	1 Dec 202100:00	–	bdu_fstec
Circl	CVE-2017-11774	3 Jul 201905:40	–	circl
CISA KEV Catalog	Microsoft Office Outlook Security Feature Bypass Vulnerability	3 Nov 202100:00	–	cisa_kev
CNVD	Microsoft Office Outlook Security Bypass Vulnerability	11 Oct 201700:00	–	cnvd
Check Point Advisories	Microsoft Outlook Security Feature Bypass (CVE-2017-11774)	4 Jul 201900:00	–	checkpoint_advisories
CVE	CVE-2017-11774	13 Oct 201713:00	–	cve
FireEye	Breaking the Rules: A Tough Outlook for Home Page Attacks (CVE-2017-11774)	4 Dec 201900:00	–	fireeye
FireEye	OVERRULED: Containing a Potentially Destructive Adversary	21 Dec 201814:00	–	fireeye
Microsoft KB	Description of the security update for Outlook 2016: October 10, 2017	10 Oct 201707:00	–	mskb

[
  {
    "product": "Microsoft Outlook",
    "vendor": "Microsoft Corporation",
    "versions": [
      {
        "status": "affected",
        "version": "Microsoft Outlook 2010 SP2"
      },
      {
        "status": "affected",
        "version": "Outlook 2013 SP1 and RT SP1"
      },
      {
        "status": "affected",
        "version": "Outlook 2016"
      }
    ]
  }
]

Source	Link
securitytracker	www.securitytracker.com/id/1039542
portal	www.portal.msrc.microsoft.com/en-US/security-guidance/advisory/CVE-2017-11774
sensepost	www.sensepost.com/blog/2017/outlook-home-page-another-ruler-vector/
securityfocus	www.securityfocus.com/bid/101098

11 Jul 2019 18:16Current

7.9High risk

Vulners AI Score7.9

EPSS0.8557