Lucene search

K
kasperskyKaspersky LabKLA61592
HistorySep 29, 2023 - 12:00 a.m.

KLA61592 DoS vulnerability in Microsoft Office

2023-09-2900:00:00
Kaspersky Lab
threats.kaspersky.com
7
microsoft office
heap buffer overflow
denial of service
public exploits
microsoft teams for mac
install updates
cve-2023-5217

8.8 High

CVSS3

Attack Vector

NETWORK

Attack Complexity

LOW

Privileges Required

NONE

User Interaction

REQUIRED

Scope

UNCHANGED

Confidentiality Impact

HIGH

Integrity Impact

HIGH

Availability Impact

HIGH

CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H

9.9 High

AI Score

Confidence

High

0.245 Low

EPSS

Percentile

96.7%

Heap buffer overflow vulnerability was found in Microsoft Office. Malicious users can exploit this vulnerability to cause denial of service.

Original advisories

CVE-2023-5217

Exploitation

Public exploits exist for this vulnerability.

Related products

Microsoft-Teams-for-Desktop

CVE list

CVE-2023-5217 critical

KB list

Solution

Install necessary updates from the KB section, that are listed in your Windows Update (Windows Update component usually can be accessed from the Control Panel) and updates from the Update Options section, that are listed in your Office Account (Office Account tab usually can be accessed from the File menu)

Install Office updates

Impacts

  • DoS

Denial of service. Exploitation of vulnerabilities with this impact can lead to loss of system availability or critical functional fault.

Affected Products

  • Microsoft Teams for MacMicrosoft Teams for Desktop

8.8 High

CVSS3

Attack Vector

NETWORK

Attack Complexity

LOW

Privileges Required

NONE

User Interaction

REQUIRED

Scope

UNCHANGED

Confidentiality Impact

HIGH

Integrity Impact

HIGH

Availability Impact

HIGH

CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H

9.9 High

AI Score

Confidence

High

0.245 Low

EPSS

Percentile

96.7%