Lucene search
MicrosoftKB4014793HistoryApr 11, 2017 - 7:00 a.m.
Security update for the Microsoft Office remote code execution vulnerability: April 11, 2017
2017-04-1107:00:00
Microsoft
support.microsoft.com
150
7.8 High
CVSS3
Attack Vector
LOCAL
Attack Complexity
LOW
Privileges Required
NONE
User Interaction
REQUIRED
Scope
UNCHANGED
Confidentiality Impact
HIGH
Integrity Impact
HIGH
Availability Impact
HIGH
CVSS:3.0/AV:L/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H
8.4 High
AI Score
Confidence
High
9.3 High
CVSS2
Access Vector
NETWORK
Access Complexity
MEDIUM
Authentication
NONE
Confidentiality Impact
COMPLETE
Integrity Impact
COMPLETE
Availability Impact
COMPLETE
AV:N/AC:M/Au:N/C:C/I:C/A:C
0.974 High
EPSS
Percentile
99.9%
Security update for the Microsoft Office remote code execution vulnerability: April 11, 2017
Summary
To learn more about the remote code execution vulnerability, go to CVE-2017-0199.
More Information
Important
- If you install a language pack after you install this update, you must reinstall this update. Therefore, we recommend that you install any language packs that you need before you install this update. For more information, see Add language packs to Windows.
How to obtain and install the update
Method 1: Windows Update
This update is available through Windows Update. When you turn on automatic updating, this update will be downloaded and installed automatically. For more information about how to turn on automatic updating, see Get security updates automatically.
Method 2: Microsoft Update Catalog
To get the stand-alone package for this update, go to the Microsoft Update Catalog website.
Deployment information
For deployment details for this security update, go to the following article in the Microsoft Knowledge Base:
Security update deployment information: April 11, 2017
More Information
__
How to obtain help and support for this security update
Help for installing updates: Windows Update FAQ
Security solutions for IT professionals: TechNet Security Support and Troubleshooting
Help for protecting your Windows-based computer from viruses and malware: Microsoft Secure
Local support according to your country: International Support
File Information
__
File hash information
| File name | SHA1 hash | SHA256 hash |
|---|---|---|
| Windows6.0-KB4014793-ia64.msu | 69218C50FC706A6607F484881D9C059F1E6FA9FC | AEFB8343CBE48F4874BFB293EFCF0DCCA6B6AAA717EB3E9C0812CD489D5690DA |
| Windows6.0-KB4014793-x64.msu | 0A2D18EFBEBCBDE044306044AA613D5C1DC63BEA | 5CEEFC1F3DA4FF18C4802ED884B32E549DF01EB6D9126E08DD57653DD479D15B |
| Windows6.0-KB4014793-x86.msu | 15E46C8E19C2E64DE1227E60833F2BA869ACCC65 | CC535A33087ED7F64C92EB0D818FC701BF2D7CEDDF004097385BB9530CCD85F5 |
File information
The English (United States) version of this software update installs files that have the attributes that are listed in the following tables.
Windows Vista and Windows Server 2008 file information
**Note:**The MANIFEST files (.manifest) and MUM files (.mum) that are installed are not listed.
__
For all supported ia64-based versions
| File name | File version | File size | Date | Time | Platform | Service branch |
|---|---|---|---|---|---|---|
| Advapi32.dll.mui | 6.0.6002.19598 | 373,760 | 06-Feb-2016 | 03:25 | Not applicable | Not applicable |
| Advapi32.dll.mui | 6.0.6002.19598 | 255,488 | 06-Feb-2016 | 01:48 | Not applicable | Not applicable |
| Advapi32.dll.mui | 6.0.6002.19598 | 385,536 | 06-Feb-2016 | 03:04 | Not applicable | Not applicable |
| Advapi32.dll.mui | 6.0.6002.19598 | 352,768 | 06-Feb-2016 | 04:03 | Not applicable | Not applicable |
| Advapi32.dll.mui | 6.0.6002.19598 | 349,696 | 06-Feb-2016 | 03:43 | Not applicable | Not applicable |
| Advapi32.dll.mui | 6.0.6002.19598 | 346,624 | 06-Feb-2016 | 04:20 | Not applicable | Not applicable |
| Advapi32.dll.mui | 6.0.6002.19598 | 338,944 | 06-Feb-2016 | 03:21 | Not applicable | Not applicable |
| Advapi32.dll.mui | 6.0.6002.24078 | 373,760 | 15-Mar-2017 | 16:28 | Not applicable | Not applicable |
| Advapi32.dll.mui | 6.0.6002.24078 | 255,488 | 15-Mar-2017 | 15:26 | Not applicable | Not applicable |
| Advapi32.dll.mui | 6.0.6002.24078 | 385,536 | 15-Mar-2017 | 16:32 | Not applicable | Not applicable |
| Advapi32.dll.mui | 6.0.6002.24078 | 352,768 | 15-Mar-2017 | 16:34 | Not applicable | Not applicable |
| Advapi32.dll.mui | 6.0.6002.24078 | 349,696 | 15-Mar-2017 | 16:29 | Not applicable | Not applicable |
| Advapi32.dll.mui | 6.0.6002.24078 | 346,624 | 15-Mar-2017 | 16:36 | Not applicable | Not applicable |
| Advapi32.dll.mui | 6.0.6002.24078 | 338,944 | 15-Mar-2017 | 16:39 | Not applicable | Not applicable |
| Advapi32.dll | 6.0.6002.19598 | 1,964,544 | 06-Feb-2016 | 01:39 | IA-64 | Not applicable |
| Advapi32.dll | 6.0.6002.24078 | 1,963,520 | 15-Mar-2017 | 15:15 | IA-64 | Not applicable |
| Ole32.dll | 6.0.6002.19755 | 4,189,184 | 15-Mar-2017 | 15:44 | IA-64 | IA64_MICROSOFT-WINDOWS-COM-BASE-QFE |
| Ole32.dll | 6.0.6002.24078 | 4,183,552 | 15-Mar-2017 | 15:17 | IA-64 | IA64_MICROSOFT-WINDOWS-COM-BASE-QFE |
| Csrsrv.dll | 6.0.6002.19680 | 145,920 | 12-Aug-2016 | 18:54 | IA-64 | Not applicable |
| Csrsrv.dll | 6.0.6002.24078 | 150,016 | 15-Mar-2017 | 15:16 | IA-64 | Not applicable |
| Kernel32.dll | 6.0.6002.19623 | 2,191,360 | 18-Mar-2016 | 16:33 | Not applicable | Not applicable |
| Kernel32.dll | 6.0.6002.24078 | 2,193,920 | 15-Mar-2017 | 15:16 | IA-64 | Not applicable |
| Ntdll.dll | 6.0.6002.19623 | 2,575,672 | 21-Mar-2016 | 22:52 | IA-64 | Not applicable |
| Ntdll.dll | 6.0.6002.24078 | 2,551,536 | 16-Mar-2017 | 00:38 | IA-64 | Not applicable |
| Ntoskrnl.exe | 6.0.6002.19741 | 9,484,008 | 09-Feb-2017 | 16:58 | IA-64 | Not applicable |
| Ntoskrnl.exe | 6.0.6002.24078 | 9,469,672 | 15-Mar-2017 | 15:22 | IA-64 | Not applicable |
| Rpcrt4.dll | 6.0.6002.19598 | 3,298,816 | 06-Feb-2016 | 01:41 | IA-64 | Not applicable |
| Rpcrt4.dll | 6.0.6002.24078 | 3,289,088 | 15-Mar-2017 | 15:17 | IA-64 | Not applicable |
| Smss.exe | 6.0.6002.19598 | 159,232 | 06-Feb-2016 | 00:36 | IA-64 | Not applicable |
| Smss.exe | 6.0.6002.24078 | 159,232 | 15-Mar-2017 | 14:23 | IA-64 | Not applicable |
| Wordpad.exe | 6.0.6002.19755 | 665,088 | 15-Mar-2017 | 14:36 | IA-64 | Not applicable |
| Wordpad.exe | 6.0.6002.24078 | 664,064 | 15-Mar-2017 | 14:35 | IA-64 | Not applicable |
| Ia32exec.bin | 6.5.6524.0 | 8,262,048 | 07-May-2014 | 23:57 | Not applicable | IA64_MICROSOFT-WINDOWS-WOW |
| Ntvdm64.dll | 6.0.6002.19598 | 27,648 | 06-Feb-2016 | 01:41 | IA-64 | IA64_MICROSOFT-WINDOWS-WOW |
| Wow64.dll | 6.0.6002.19598 | 524,288 | 06-Feb-2016 | 01:42 | IA-64 | IA64_MICROSOFT-WINDOWS-WOW |
| Wow64cpu.dll | 6.0.6002.19598 | 43,008 | 06-Feb-2016 | 01:42 | IA-64 | IA64_MICROSOFT-WINDOWS-WOW |
| Wow64win.dll | 6.0.6002.19598 | 617,984 | 06-Feb-2016 | 01:42 | IA-64 | IA64_MICROSOFT-WINDOWS-WOW |
| Wowia32x.dll | 6.5.6563.0 | 88,576 | 06-Feb-2016 | 01:42 | IA-64 | IA64_MICROSOFT-WINDOWS-WOW |
| Ia32exec.bin | 6.5.6524.0 | 8,262,048 | 07-Mar-2016 | 23:41 | Not applicable | IA64_MICROSOFT-WINDOWS-WOW |
| Ntvdm64.dll | 6.0.6002.24078 | 27,648 | 15-Mar-2017 | 15:17 | IA-64 | IA64_MICROSOFT-WINDOWS-WOW |
| Wow64.dll | 6.0.6002.24078 | 524,288 | 15-Mar-2017 | 15:18 | IA-64 | IA64_MICROSOFT-WINDOWS-WOW |
| Wow64cpu.dll | 6.0.6002.24078 | 43,008 | 15-Mar-2017 | 15:18 | IA-64 | IA64_MICROSOFT-WINDOWS-WOW |
| Wow64win.dll | 6.0.6002.24078 | 617,984 | 15-Mar-2017 | 15:18 | IA-64 | IA64_MICROSOFT-WINDOWS-WOW |
| Wowia32x.dll | 6.5.6563.0 | 88,576 | 15-Mar-2017 | 15:18 | IA-64 | IA64_MICROSOFT-WINDOWS-WOW |
| Kernel32.dll | 6.0.6002.19623 | 861,696 | 18-Mar-2016 | 17:10 | x86 | Not applicable |
| Kernel32.dll | 6.0.6002.24078 | 862,720 | 15-Mar-2017 | 15:21 | x86 | Not applicable |
| Ntdll.dll | 6.0.6002.19623 | 1,171,488 | 21-Mar-2016 | 22:52 | x86 | Not applicable |
| Ntdll.dll | 6.0.6002.24078 | 1,168,392 | 16-Mar-2017 | 00:38 | x86 | Not applicable |
| Rpcrt4.dll | 6.0.6002.19598 | 679,424 | 06-Feb-2016 | 02:12 | x86 | Not applicable |
| Rpcrt4.dll | 6.0.6002.24078 | 678,912 | 15-Mar-2017 | 15:21 | x86 | Not applicable |
| Wordpad.exe | 6.0.6002.19755 | 340,480 | 15-Mar-2017 | 14:32 | x86 | Not applicable |
| Wordpad.exe | 6.0.6002.24078 | 339,968 | 15-Mar-2017 | 14:29 | x86 | Not applicable |
| Acwow64.dll | 6.0.6002.19598 | 43,008 | 06-Feb-2016 | 02:11 | x86 | WOW64_MICROSOFT-WINDOWS-WOW |
| Instnm.exe | 6.0.6002.19598 | 7,680 | 06-Feb-2016 | 00:32 | x86 | WOW64_MICROSOFT-WINDOWS-WOW |
| Ntvdm64.dll | 6.0.6002.19598 | 14,336 | 06-Feb-2016 | 02:12 | x86 | WOW64_MICROSOFT-WINDOWS-WOW |
| Setup16.exe | 3.1.0.1918 | 26,112 | 06-Feb-2016 | 00:32 | x86 | WOW64_MICROSOFT-WINDOWS-WOW |
| User.exe | 6.0.6002.19598 | 2,560 | 06-Feb-2016 | 00:32 | x86 | WOW64_MICROSOFT-WINDOWS-WOW |
| Wow32.dll | 6.0.6002.19598 | 5,120 | 06-Feb-2016 | 02:12 | x86 | WOW64_MICROSOFT-WINDOWS-WOW |
| Acwow64.dll | 6.0.6002.24078 | 43,008 | 15-Mar-2017 | 15:19 | x86 | WOW64_MICROSOFT-WINDOWS-WOW |
| Instnm.exe | 6.0.6002.24078 | 7,680 | 15-Mar-2017 | 14:21 | x86 | WOW64_MICROSOFT-WINDOWS-WOW |
| Ntvdm64.dll | 6.0.6002.24078 | 14,336 | 15-Mar-2017 | 15:20 | x86 | WOW64_MICROSOFT-WINDOWS-WOW |
| Setup16.exe | 3.1.0.1918 | 26,112 | 15-Mar-2017 | 14:21 | x86 | WOW64_MICROSOFT-WINDOWS-WOW |
| User.exe | 6.0.6002.24078 | 2,560 | 15-Mar-2017 | 14:21 | x86 | WOW64_MICROSOFT-WINDOWS-WOW |
| Wow32.dll | 6.0.6002.24078 | 5,120 | 15-Mar-2017 | 15:21 | x86 | WOW64_MICROSOFT-WINDOWS-WOW |
| Advapi32.dll.mui | 6.0.6002.19598 | 385,024 | 06-Feb-2016 | 04:17 | Not applicable | Not applicable |
| Advapi32.dll.mui | 6.0.6002.19598 | 266,240 | 06-Feb-2016 | 02:20 | Not applicable | Not applicable |
| Advapi32.dll.mui | 6.0.6002.19598 | 393,216 | 06-Feb-2016 | 02:57 | Not applicable | Not applicable |
| Advapi32.dll.mui | 6.0.6002.19598 | 360,448 | 06-Feb-2016 | 03:28 | Not applicable | Not applicable |
| Advapi32.dll.mui | 6.0.6002.19598 | 360,448 | 06-Feb-2016 | 04:53 | Not applicable | Not applicable |
| Advapi32.dll.mui | 6.0.6002.19598 | 356,352 | 06-Feb-2016 | 03:48 | Not applicable | Not applicable |
| Advapi32.dll.mui | 6.0.6002.19598 | 348,160 | 06-Feb-2016 | 04:33 | Not applicable | Not applicable |
| Advapi32.dll.mui | 6.0.6002.24078 | 385,024 | 15-Mar-2017 | 16:34 | Not applicable | Not applicable |
| Advapi32.dll.mui | 6.0.6002.24078 | 266,240 | 15-Mar-2017 | 15:30 | Not applicable | Not applicable |
| Advapi32.dll.mui | 6.0.6002.24078 | 393,216 | 15-Mar-2017 | 16:26 | Not applicable | Not applicable |
| Advapi32.dll.mui | 6.0.6002.24078 | 360,448 | 15-Mar-2017 | 16:29 | Not applicable | Not applicable |
| Advapi32.dll.mui | 6.0.6002.24078 | 360,448 | 15-Mar-2017 | 16:23 | Not applicable | Not applicable |
| Advapi32.dll.mui | 6.0.6002.24078 | 356,352 | 15-Mar-2017 | 16:38 | Not applicable | Not applicable |
| Advapi32.dll.mui | 6.0.6002.24078 | 348,160 | 15-Mar-2017 | 16:30 | Not applicable | Not applicable |
| Advapi32.dll | 6.0.6002.19598 | 802,304 | 06-Feb-2016 | 02:11 | x86 | Not applicable |
| Advapi32.dll | 6.0.6002.24078 | 802,816 | 15-Mar-2017 | 15:19 | x86 | Not applicable |
| Ole32.dll | 6.0.6002.19755 | 1,319,424 | 15-Mar-2017 | 15:57 | x86 | X86_MICROSOFT-WINDOWS-COM-BASE-QFE |
| Ole32.dll | 6.0.6002.24078 | 1,317,376 | 15-Mar-2017 | 15:20 | x86 | X86_MICROSOFT-WINDOWS-COM-BASE-QFE |
__
For all supported x64-based versions
| File name | File version | File size | Date | Time | Platform | Service branch |
|---|---|---|---|---|---|---|
| Advapi32.dll.mui | 6.0.6002.19598 | 371,200 | 06-Feb-2016 | 04:25 | Not applicable | Not applicable |
| Advapi32.dll.mui | 6.0.6002.19598 | 379,392 | 06-Feb-2016 | 04:39 | Not applicable | Not applicable |
| Advapi32.dll.mui | 6.0.6002.19598 | 376,832 | 06-Feb-2016 | 04:22 | Not applicable | Not applicable |
| Advapi32.dll.mui | 6.0.6002.19598 | 373,760 | 06-Feb-2016 | 04:43 | Not applicable | Not applicable |
| Advapi32.dll.mui | 6.0.6002.19598 | 393,216 | 06-Feb-2016 | 04:44 | Not applicable | Not applicable |
| Advapi32.dll.mui | 6.0.6002.19598 | 255,488 | 06-Feb-2016 | 02:09 | Not applicable | Not applicable |
| Advapi32.dll.mui | 6.0.6002.19598 | 381,952 | 06-Feb-2016 | 04:02 | Not applicable | Not applicable |
| Advapi32.dll.mui | 6.0.6002.19598 | 375,808 | 06-Feb-2016 | 03:20 | Not applicable | Not applicable |
| Advapi32.dll.mui | 6.0.6002.19598 | 385,536 | 06-Feb-2016 | 03:12 | Not applicable | Not applicable |
| Advapi32.dll.mui | 6.0.6002.19598 | 366,080 | 06-Feb-2016 | 03:13 | Not applicable | Not applicable |
| Advapi32.dll.mui | 6.0.6002.19598 | 383,488 | 06-Feb-2016 | 05:05 | Not applicable | Not applicable |
| Advapi32.dll.mui | 6.0.6002.19598 | 380,928 | 06-Feb-2016 | 03:03 | Not applicable | Not applicable |
| Advapi32.dll.mui | 6.0.6002.19598 | 352,768 | 06-Feb-2016 | 03:55 | Not applicable | Not applicable |
| Advapi32.dll.mui | 6.0.6002.19598 | 349,696 | 06-Feb-2016 | 05:00 | Not applicable | Not applicable |
| Advapi32.dll.mui | 6.0.6002.19598 | 374,272 | 06-Feb-2016 | 03:03 | Not applicable | Not applicable |
| Advapi32.dll.mui | 6.0.6002.19598 | 380,416 | 06-Feb-2016 | 04:29 | Not applicable | Not applicable |
| Advapi32.dll.mui | 6.0.6002.19598 | 385,536 | 06-Feb-2016 | 03:07 | Not applicable | Not applicable |
| Advapi32.dll.mui | 6.0.6002.19598 | 379,392 | 06-Feb-2016 | 04:33 | Not applicable | Not applicable |
| Advapi32.dll.mui | 6.0.6002.19598 | 379,904 | 06-Feb-2016 | 04:41 | Not applicable | Not applicable |
| Advapi32.dll.mui | 6.0.6002.19598 | 385,536 | 06-Feb-2016 | 03:18 | Not applicable | Not applicable |
| Advapi32.dll.mui | 6.0.6002.19598 | 375,296 | 06-Feb-2016 | 03:14 | Not applicable | Not applicable |
| Advapi32.dll.mui | 6.0.6002.19598 | 375,296 | 06-Feb-2016 | 04:00 | Not applicable | Not applicable |
| Advapi32.dll.mui | 6.0.6002.19598 | 346,624 | 06-Feb-2016 | 03:37 | Not applicable | Not applicable |
| Advapi32.dll.mui | 6.0.6002.19598 | 338,944 | 06-Feb-2016 | 04:19 | Not applicable | Not applicable |
| Advapi32.dll.mui | 6.0.6002.24078 | 371,200 | 15-Mar-2017 | 16:48 | Not applicable | Not applicable |
| Advapi32.dll.mui | 6.0.6002.24078 | 379,392 | 15-Mar-2017 | 16:50 | Not applicable | Not applicable |
| Advapi32.dll.mui | 6.0.6002.24078 | 376,832 | 15-Mar-2017 | 16:41 | Not applicable | Not applicable |
| Advapi32.dll.mui | 6.0.6002.24078 | 373,760 | 15-Mar-2017 | 16:42 | Not applicable | Not applicable |
| Advapi32.dll.mui | 6.0.6002.24078 | 393,216 | 15-Mar-2017 | 16:51 | Not applicable | Not applicable |
| Advapi32.dll.mui | 6.0.6002.24078 | 255,488 | 15-Mar-2017 | 15:53 | Not applicable | Not applicable |
| Advapi32.dll.mui | 6.0.6002.24078 | 381,952 | 15-Mar-2017 | 16:42 | Not applicable | Not applicable |
| Advapi32.dll.mui | 6.0.6002.24078 | 375,808 | 15-Mar-2017 | 16:47 | Not applicable | Not applicable |
| Advapi32.dll.mui | 6.0.6002.24078 | 385,536 | 15-Mar-2017 | 16:51 | Not applicable | Not applicable |
| Advapi32.dll.mui | 6.0.6002.24078 | 366,080 | 15-Mar-2017 | 16:50 | Not applicable | Not applicable |
| Advapi32.dll.mui | 6.0.6002.24078 | 383,488 | 15-Mar-2017 | 16:58 | Not applicable | Not applicable |
| Advapi32.dll.mui | 6.0.6002.24078 | 380,928 | 15-Mar-2017 | 16:49 | Not applicable | Not applicable |
| Advapi32.dll.mui | 6.0.6002.24078 | 352,768 | 15-Mar-2017 | 16:51 | Not applicable | Not applicable |
| Advapi32.dll.mui | 6.0.6002.24078 | 349,696 | 15-Mar-2017 | 16:44 | Not applicable | Not applicable |
| Advapi32.dll.mui | 6.0.6002.24078 | 374,272 | 15-Mar-2017 | 16:54 | Not applicable | Not applicable |
| Advapi32.dll.mui | 6.0.6002.24078 | 380,416 | 15-Mar-2017 | 16:48 | Not applicable | Not applicable |
| Advapi32.dll.mui | 6.0.6002.24078 | 385,536 | 15-Mar-2017 | 16:55 | Not applicable | Not applicable |
| Advapi32.dll.mui | 6.0.6002.24078 | 379,392 | 15-Mar-2017 | 16:43 | Not applicable | Not applicable |
| Advapi32.dll.mui | 6.0.6002.24078 | 379,904 | 15-Mar-2017 | 16:44 | Not applicable | Not applicable |
| Advapi32.dll.mui | 6.0.6002.24078 | 385,536 | 15-Mar-2017 | 16:45 | Not applicable | Not applicable |
| Advapi32.dll.mui | 6.0.6002.24078 | 375,296 | 15-Mar-2017 | 16:52 | Not applicable | Not applicable |
| Advapi32.dll.mui | 6.0.6002.24078 | 375,296 | 15-Mar-2017 | 16:51 | Not applicable | Not applicable |
| Advapi32.dll.mui | 6.0.6002.24078 | 346,624 | 15-Mar-2017 | 16:46 | Not applicable | Not applicable |
| Advapi32.dll.mui | 6.0.6002.24078 | 338,944 | 15-Mar-2017 | 16:44 | Not applicable | Not applicable |
| Advapi32.dll | 6.0.6002.19598 | 1,067,008 | 06-Feb-2016 | 01:59 | x64 | Not applicable |
| Advapi32.dll | 6.0.6002.24078 | 1,067,520 | 15-Mar-2017 | 15:41 | x64 | Not applicable |
| Ole32.dll | 6.0.6002.19755 | 1,908,736 | 15-Mar-2017 | 16:13 | x64 | AMD64_MICROSOFT-WINDOWS-COM-BASE-QFE |
| Ole32.dll | 6.0.6002.24078 | 1,915,392 | 15-Mar-2017 | 15:43 | x64 | AMD64_MICROSOFT-WINDOWS-COM-BASE-QFE |
| Csrsrv.dll | 6.0.6002.19680 | 86,016 | 12-Aug-2016 | 19:07 | x64 | Not applicable |
| Csrsrv.dll | 6.0.6002.24078 | 86,016 | 15-Mar-2017 | 15:42 | x64 | Not applicable |
| Kernel32.dll | 6.0.6002.19623 | 1,212,928 | 18-Mar-2016 | 18:14 | x64 | Not applicable |
| Kernel32.dll | 6.0.6002.24078 | 1,214,976 | 15-Mar-2017 | 15:43 | x64 | Not applicable |
| Ntdll.dll | 6.0.6002.19623 | 1,589,168 | 21-Mar-2016 | 23:00 | x64 | Not applicable |
| Ntdll.dll | 6.0.6002.24078 | 1,583,512 | 16-Mar-2017 | 00:42 | x64 | Not applicable |
| Ntoskrnl.exe | 6.0.6002.19741 | 4,693,224 | 09-Feb-2017 | 17:28 | x64 | Not applicable |
| Ntoskrnl.exe | 6.0.6002.24078 | 4,665,064 | 15-Mar-2017 | 15:49 | x64 | Not applicable |
| Rpcrt4.dll | 6.0.6002.19598 | 1,304,576 | 06-Feb-2016 | 02:01 | x64 | Not applicable |
| Rpcrt4.dll | 6.0.6002.24078 | 1,308,160 | 15-Mar-2017 | 15:43 | x64 | Not applicable |
| Smss.exe | 6.0.6002.19598 | 75,264 | 06-Feb-2016 | 00:48 | x64 | Not applicable |
| Smss.exe | 6.0.6002.24078 | 75,776 | 15-Mar-2017 | 14:43 | x64 | Not applicable |
| Wordpad.exe | 6.0.6002.19755 | 408,576 | 15-Mar-2017 | 14:53 | x64 | Not applicable |
| Wordpad.exe | 6.0.6002.24078 | 408,064 | 15-Mar-2017 | 14:54 | x64 | Not applicable |
| Ntvdm64.dll | 6.0.6002.19598 | 16,896 | 06-Feb-2016 | 02:01 | x64 | AMD64_MICROSOFT-WINDOWS-WOW |
| Wow64.dll | 6.0.6002.19598 | 234,496 | 06-Feb-2016 | 02:02 | x64 | AMD64_MICROSOFT-WINDOWS-WOW |
| Wow64cpu.dll | 6.0.6002.19598 | 17,408 | 06-Feb-2016 | 02:02 | x64 | AMD64_MICROSOFT-WINDOWS-WOW |
| Wow64win.dll | 6.0.6002.19598 | 301,568 | 06-Feb-2016 | 02:02 | x64 | AMD64_MICROSOFT-WINDOWS-WOW |
| Ntvdm64.dll | 6.0.6002.24078 | 16,896 | 15-Mar-2017 | 15:43 | x64 | AMD64_MICROSOFT-WINDOWS-WOW |
| Wow64.dll | 6.0.6002.24078 | 234,496 | 15-Mar-2017 | 15:44 | x64 | AMD64_MICROSOFT-WINDOWS-WOW |
| Wow64cpu.dll | 6.0.6002.24078 | 17,408 | 15-Mar-2017 | 15:44 | x64 | AMD64_MICROSOFT-WINDOWS-WOW |
| Wow64win.dll | 6.0.6002.24078 | 301,568 | 15-Mar-2017 | 15:44 | x64 | AMD64_MICROSOFT-WINDOWS-WOW |
| Kernel32.dll | 6.0.6002.19623 | 861,696 | 18-Mar-2016 | 17:10 | x86 | Not applicable |
| Kernel32.dll | 6.0.6002.24078 | 862,720 | 15-Mar-2017 | 15:21 | x86 | Not applicable |
| Ntdll.dll | 6.0.6002.19623 | 1,171,488 | 21-Mar-2016 | 23:00 | x86 | Not applicable |
| Ntdll.dll | 6.0.6002.24078 | 1,168,392 | 16-Mar-2017 | 00:42 | x86 | Not applicable |
| Rpcrt4.dll | 6.0.6002.19598 | 679,424 | 06-Feb-2016 | 02:12 | x86 | Not applicable |
| Rpcrt4.dll | 6.0.6002.24078 | 678,912 | 15-Mar-2017 | 15:21 | x86 | Not applicable |
| Wordpad.exe | 6.0.6002.19755 | 340,480 | 15-Mar-2017 | 14:32 | x86 | Not applicable |
| Wordpad.exe | 6.0.6002.24078 | 339,968 | 15-Mar-2017 | 14:29 | x86 | Not applicable |
| Acwow64.dll | 6.0.6002.19598 | 43,008 | 06-Feb-2016 | 02:11 | x86 | WOW64_MICROSOFT-WINDOWS-WOW |
| Instnm.exe | 6.0.6002.19598 | 7,680 | 06-Feb-2016 | 00:32 | x86 | WOW64_MICROSOFT-WINDOWS-WOW |
| Ntvdm64.dll | 6.0.6002.19598 | 14,336 | 06-Feb-2016 | 02:12 | x86 | WOW64_MICROSOFT-WINDOWS-WOW |
| Setup16.exe | 3.1.0.1918 | 26,112 | 06-Feb-2016 | 00:32 | x86 | WOW64_MICROSOFT-WINDOWS-WOW |
| User.exe | 6.0.6002.19598 | 2,560 | 06-Feb-2016 | 00:32 | x86 | WOW64_MICROSOFT-WINDOWS-WOW |
| Wow32.dll | 6.0.6002.19598 | 5,120 | 06-Feb-2016 | 02:12 | x86 | WOW64_MICROSOFT-WINDOWS-WOW |
| Acwow64.dll | 6.0.6002.24078 | 43,008 | 15-Mar-2017 | 15:19 | x86 | WOW64_MICROSOFT-WINDOWS-WOW |
| Instnm.exe | 6.0.6002.24078 | 7,680 | 15-Mar-2017 | 14:21 | x86 | WOW64_MICROSOFT-WINDOWS-WOW |
| Ntvdm64.dll | 6.0.6002.24078 | 14,336 | 15-Mar-2017 | 15:20 | x86 | WOW64_MICROSOFT-WINDOWS-WOW |
| Setup16.exe | 3.1.0.1918 | 26,112 | 15-Mar-2017 | 14:21 | x86 | WOW64_MICROSOFT-WINDOWS-WOW |
| User.exe | 6.0.6002.24078 | 2,560 | 15-Mar-2017 | 14:21 | x86 | WOW64_MICROSOFT-WINDOWS-WOW |
| Wow32.dll | 6.0.6002.24078 | 5,120 | 15-Mar-2017 | 15:21 | x86 | WOW64_MICROSOFT-WINDOWS-WOW |
| Advapi32.dll.mui | 6.0.6002.19598 | 380,928 | 06-Feb-2016 | 02:53 | Not applicable | Not applicable |
| Advapi32.dll.mui | 6.0.6002.19598 | 389,120 | 06-Feb-2016 | 04:12 | Not applicable | Not applicable |
| Advapi32.dll.mui | 6.0.6002.19598 | 385,024 | 06-Feb-2016 | 04:00 | Not applicable | Not applicable |
| Advapi32.dll.mui | 6.0.6002.19598 | 385,024 | 06-Feb-2016 | 04:17 | Not applicable | Not applicable |
| Advapi32.dll.mui | 6.0.6002.19598 | 401,408 | 06-Feb-2016 | 04:09 | Not applicable | Not applicable |
| Advapi32.dll.mui | 6.0.6002.19598 | 266,240 | 06-Feb-2016 | 02:20 | Not applicable | Not applicable |
| Advapi32.dll.mui | 6.0.6002.19598 | 393,216 | 06-Feb-2016 | 03:09 | Not applicable | Not applicable |
| Advapi32.dll.mui | 6.0.6002.19598 | 385,024 | 06-Feb-2016 | 04:03 | Not applicable | Not applicable |
| Advapi32.dll.mui | 6.0.6002.19598 | 393,216 | 06-Feb-2016 | 02:57 | Not applicable | Not applicable |
| Advapi32.dll.mui | 6.0.6002.19598 | 376,832 | 06-Feb-2016 | 04:06 | Not applicable | Not applicable |
| Advapi32.dll.mui | 6.0.6002.19598 | 393,216 | 06-Feb-2016 | 03:59 | Not applicable | Not applicable |
| Advapi32.dll.mui | 6.0.6002.19598 | 389,120 | 06-Feb-2016 | 03:00 | Not applicable | Not applicable |
| Advapi32.dll.mui | 6.0.6002.19598 | 360,448 | 06-Feb-2016 | 03:28 | Not applicable | Not applicable |
| Advapi32.dll.mui | 6.0.6002.19598 | 360,448 | 06-Feb-2016 | 04:53 | Not applicable | Not applicable |
| Advapi32.dll.mui | 6.0.6002.19598 | 385,024 | 06-Feb-2016 | 02:53 | Not applicable | Not applicable |
| Advapi32.dll.mui | 6.0.6002.19598 | 389,120 | 06-Feb-2016 | 03:06 | Not applicable | Not applicable |
| Advapi32.dll.mui | 6.0.6002.19598 | 393,216 | 06-Feb-2016 | 03:04 | Not applicable | Not applicable |
| Advapi32.dll.mui | 6.0.6002.19598 | 389,120 | 06-Feb-2016 | 04:14 | Not applicable | Not applicable |
| Advapi32.dll.mui | 6.0.6002.19598 | 389,120 | 06-Feb-2016 | 04:37 | Not applicable | Not applicable |
| Advapi32.dll.mui | 6.0.6002.19598 | 393,216 | 06-Feb-2016 | 04:58 | Not applicable | Not applicable |
| Advapi32.dll.mui | 6.0.6002.19598 | 385,024 | 06-Feb-2016 | 03:53 | Not applicable | Not applicable |
| Advapi32.dll.mui | 6.0.6002.19598 | 385,024 | 06-Feb-2016 | 03:11 | Not applicable | Not applicable |
| Advapi32.dll.mui | 6.0.6002.19598 | 356,352 | 06-Feb-2016 | 03:48 | Not applicable | Not applicable |
| Advapi32.dll.mui | 6.0.6002.19598 | 348,160 | 06-Feb-2016 | 04:33 | Not applicable | Not applicable |
| Advapi32.dll.mui | 6.0.6002.24078 | 380,928 | 15-Mar-2017 | 16:20 | Not applicable | Not applicable |
| Advapi32.dll.mui | 6.0.6002.24078 | 389,120 | 15-Mar-2017 | 16:28 | Not applicable | Not applicable |
| Advapi32.dll.mui | 6.0.6002.24078 | 385,024 | 15-Mar-2017 | 16:24 | Not applicable | Not applicable |
| Advapi32.dll.mui | 6.0.6002.24078 | 385,024 | 15-Mar-2017 | 16:34 | Not applicable | Not applicable |
| Advapi32.dll.mui | 6.0.6002.24078 | 401,408 | 15-Mar-2017 | 16:33 | Not applicable | Not applicable |
| Advapi32.dll.mui | 6.0.6002.24078 | 266,240 | 15-Mar-2017 | 15:30 | Not applicable | Not applicable |
| Advapi32.dll.mui | 6.0.6002.24078 | 393,216 | 15-Mar-2017 | 16:25 | Not applicable | Not applicable |
| Advapi32.dll.mui | 6.0.6002.24078 | 385,024 | 15-Mar-2017 | 16:24 | Not applicable | Not applicable |
| Advapi32.dll.mui | 6.0.6002.24078 | 393,216 | 15-Mar-2017 | 16:26 | Not applicable | Not applicable |
| Advapi32.dll.mui | 6.0.6002.24078 | 376,832 | 15-Mar-2017 | 16:17 | Not applicable | Not applicable |
| Advapi32.dll.mui | 6.0.6002.24078 | 393,216 | 15-Mar-2017 | 16:27 | Not applicable | Not applicable |
| Advapi32.dll.mui | 6.0.6002.24078 | 389,120 | 15-Mar-2017 | 16:16 | Not applicable | Not applicable |
| Advapi32.dll.mui | 6.0.6002.24078 | 360,448 | 15-Mar-2017 | 16:29 | Not applicable | Not applicable |
| Advapi32.dll.mui | 6.0.6002.24078 | 360,448 | 15-Mar-2017 | 16:23 | Not applicable | Not applicable |
| Advapi32.dll.mui | 6.0.6002.24078 | 385,024 | 15-Mar-2017 | 16:30 | Not applicable | Not applicable |
| Advapi32.dll.mui | 6.0.6002.24078 | 389,120 | 15-Mar-2017 | 16:28 | Not applicable | Not applicable |
| Advapi32.dll.mui | 6.0.6002.24078 | 393,216 | 15-Mar-2017 | 16:20 | Not applicable | Not applicable |
| Advapi32.dll.mui | 6.0.6002.24078 | 389,120 | 15-Mar-2017 | 16:21 | Not applicable | Not applicable |
| Advapi32.dll.mui | 6.0.6002.24078 | 389,120 | 15-Mar-2017 | 16:23 | Not applicable | Not applicable |
| Advapi32.dll.mui | 6.0.6002.24078 | 393,216 | 15-Mar-2017 | 16:37 | Not applicable | Not applicable |
| Advapi32.dll.mui | 6.0.6002.24078 | 385,024 | 15-Mar-2017 | 16:35 | Not applicable | Not applicable |
| Advapi32.dll.mui | 6.0.6002.24078 | 385,024 | 15-Mar-2017 | 16:36 | Not applicable | Not applicable |
| Advapi32.dll.mui | 6.0.6002.24078 | 356,352 | 15-Mar-2017 | 16:38 | Not applicable | Not applicable |
| Advapi32.dll.mui | 6.0.6002.24078 | 348,160 | 15-Mar-2017 | 16:30 | Not applicable | Not applicable |
| Advapi32.dll | 6.0.6002.19598 | 802,304 | 06-Feb-2016 | 02:11 | x86 | Not applicable |
| Advapi32.dll | 6.0.6002.24078 | 802,816 | 15-Mar-2017 | 15:19 | x86 | Not applicable |
| Ole32.dll | 6.0.6002.19755 | 1,319,424 | 15-Mar-2017 | 15:57 | x86 | X86_MICROSOFT-WINDOWS-COM-BASE-QFE |
| Ole32.dll | 6.0.6002.24078 | 1,317,376 | 15-Mar-2017 | 15:20 | x86 | X86_MICROSOFT-WINDOWS-COM-BASE-QFE |
__
For all supported x86-based versions
| File name | File version | File size | Date | Time | Platform | Service branch |
|---|---|---|---|---|---|---|
| Advapi32.dll.mui | 6.0.6002.19598 | 380,928 | 06-Feb-2016 | 02:53 | Not applicable | Not applicable |
| Advapi32.dll.mui | 6.0.6002.19598 | 389,120 | 06-Feb-2016 | 04:12 | Not applicable | Not applicable |
| Advapi32.dll.mui | 6.0.6002.19598 | 385,024 | 06-Feb-2016 | 04:00 | Not applicable | Not applicable |
| Advapi32.dll.mui | 6.0.6002.19598 | 385,024 | 06-Feb-2016 | 04:17 | Not applicable | Not applicable |
| Advapi32.dll.mui | 6.0.6002.19598 | 401,408 | 06-Feb-2016 | 04:09 | Not applicable | Not applicable |
| Advapi32.dll.mui | 6.0.6002.19598 | 266,240 | 06-Feb-2016 | 02:20 | Not applicable | Not applicable |
| Advapi32.dll.mui | 6.0.6002.19598 | 393,216 | 06-Feb-2016 | 03:09 | Not applicable | Not applicable |
| Advapi32.dll.mui | 6.0.6002.19598 | 385,024 | 06-Feb-2016 | 04:03 | Not applicable | Not applicable |
| Advapi32.dll.mui | 6.0.6002.19598 | 393,216 | 06-Feb-2016 | 02:57 | Not applicable | Not applicable |
| Advapi32.dll.mui | 6.0.6002.19598 | 376,832 | 06-Feb-2016 | 04:06 | Not applicable | Not applicable |
| Advapi32.dll.mui | 6.0.6002.19598 | 393,216 | 06-Feb-2016 | 03:59 | Not applicable | Not applicable |
| Advapi32.dll.mui | 6.0.6002.19598 | 389,120 | 06-Feb-2016 | 03:00 | Not applicable | Not applicable |
| Advapi32.dll.mui | 6.0.6002.19598 | 360,448 | 06-Feb-2016 | 03:28 | Not applicable | Not applicable |
| Advapi32.dll.mui | 6.0.6002.19598 | 360,448 | 06-Feb-2016 | 04:53 | Not applicable | Not applicable |
| Advapi32.dll.mui | 6.0.6002.19598 | 385,024 | 06-Feb-2016 | 02:53 | Not applicable | Not applicable |
| Advapi32.dll.mui | 6.0.6002.19598 | 389,120 | 06-Feb-2016 | 03:06 | Not applicable | Not applicable |
| Advapi32.dll.mui | 6.0.6002.19598 | 393,216 | 06-Feb-2016 | 03:04 | Not applicable | Not applicable |
| Advapi32.dll.mui | 6.0.6002.19598 | 389,120 | 06-Feb-2016 | 04:14 | Not applicable | Not applicable |
| Advapi32.dll.mui | 6.0.6002.19598 | 389,120 | 06-Feb-2016 | 04:37 | Not applicable | Not applicable |
| Advapi32.dll.mui | 6.0.6002.19598 | 393,216 | 06-Feb-2016 | 04:58 | Not applicable | Not applicable |
| Advapi32.dll.mui | 6.0.6002.19598 | 385,024 | 06-Feb-2016 | 03:53 | Not applicable | Not applicable |
| Advapi32.dll.mui | 6.0.6002.19598 | 385,024 | 06-Feb-2016 | 03:11 | Not applicable | Not applicable |
| Advapi32.dll.mui | 6.0.6002.19598 | 356,352 | 06-Feb-2016 | 03:48 | Not applicable | Not applicable |
| Advapi32.dll.mui | 6.0.6002.19598 | 348,160 | 06-Feb-2016 | 04:33 | Not applicable | Not applicable |
| Advapi32.dll.mui | 6.0.6002.24078 | 380,928 | 15-Mar-2017 | 16:20 | Not applicable | Not applicable |
| Advapi32.dll.mui | 6.0.6002.24078 | 389,120 | 15-Mar-2017 | 16:28 | Not applicable | Not applicable |
| Advapi32.dll.mui | 6.0.6002.24078 | 385,024 | 15-Mar-2017 | 16:24 | Not applicable | Not applicable |
| Advapi32.dll.mui | 6.0.6002.24078 | 385,024 | 15-Mar-2017 | 16:34 | Not applicable | Not applicable |
| Advapi32.dll.mui | 6.0.6002.24078 | 401,408 | 15-Mar-2017 | 16:33 | Not applicable | Not applicable |
| Advapi32.dll.mui | 6.0.6002.24078 | 266,240 | 15-Mar-2017 | 15:30 | Not applicable | Not applicable |
| Advapi32.dll.mui | 6.0.6002.24078 | 393,216 | 15-Mar-2017 | 16:25 | Not applicable | Not applicable |
| Advapi32.dll.mui | 6.0.6002.24078 | 385,024 | 15-Mar-2017 | 16:24 | Not applicable | Not applicable |
| Advapi32.dll.mui | 6.0.6002.24078 | 393,216 | 15-Mar-2017 | 16:26 | Not applicable | Not applicable |
| Advapi32.dll.mui | 6.0.6002.24078 | 376,832 | 15-Mar-2017 | 16:17 | Not applicable | Not applicable |
| Advapi32.dll.mui | 6.0.6002.24078 | 393,216 | 15-Mar-2017 | 16:27 | Not applicable | Not applicable |
| Advapi32.dll.mui | 6.0.6002.24078 | 389,120 | 15-Mar-2017 | 16:16 | Not applicable | Not applicable |
| Advapi32.dll.mui | 6.0.6002.24078 | 360,448 | 15-Mar-2017 | 16:29 | Not applicable | Not applicable |
| Advapi32.dll.mui | 6.0.6002.24078 | 360,448 | 15-Mar-2017 | 16:23 | Not applicable | Not applicable |
| Advapi32.dll.mui | 6.0.6002.24078 | 385,024 | 15-Mar-2017 | 16:30 | Not applicable | Not applicable |
| Advapi32.dll.mui | 6.0.6002.24078 | 389,120 | 15-Mar-2017 | 16:28 | Not applicable | Not applicable |
| Advapi32.dll.mui | 6.0.6002.24078 | 393,216 | 15-Mar-2017 | 16:20 | Not applicable | Not applicable |
| Advapi32.dll.mui | 6.0.6002.24078 | 389,120 | 15-Mar-2017 | 16:21 | Not applicable | Not applicable |
| Advapi32.dll.mui | 6.0.6002.24078 | 389,120 | 15-Mar-2017 | 16:23 | Not applicable | Not applicable |
| Advapi32.dll.mui | 6.0.6002.24078 | 393,216 | 15-Mar-2017 | 16:37 | Not applicable | Not applicable |
| Advapi32.dll.mui | 6.0.6002.24078 | 385,024 | 15-Mar-2017 | 16:35 | Not applicable | Not applicable |
| Advapi32.dll.mui | 6.0.6002.24078 | 385,024 | 15-Mar-2017 | 16:36 | Not applicable | Not applicable |
| Advapi32.dll.mui | 6.0.6002.24078 | 356,352 | 15-Mar-2017 | 16:38 | Not applicable | Not applicable |
| Advapi32.dll.mui | 6.0.6002.24078 | 348,160 | 15-Mar-2017 | 16:30 | Not applicable | Not applicable |
| Advapi32.dll | 6.0.6002.19598 | 802,304 | 06-Feb-2016 | 02:11 | x86 | Not applicable |
| Advapi32.dll | 6.0.6002.24078 | 802,816 | 15-Mar-2017 | 15:19 | x86 | Not applicable |
| Ole32.dll | 6.0.6002.19755 | 1,319,424 | 15-Mar-2017 | 15:57 | x86 | X86_MICROSOFT-WINDOWS-COM-BASE-QFE |
| Ole32.dll | 6.0.6002.24078 | 1,317,376 | 15-Mar-2017 | 15:20 | x86 | X86_MICROSOFT-WINDOWS-COM-BASE-QFE |
| Csrsrv.dll | 6.0.6002.19680 | 49,664 | 12-Aug-2016 | 18:55 | x86 | Not applicable |
| Csrsrv.dll | 6.0.6002.24078 | 49,664 | 15-Mar-2017 | 15:19 | x86 | Not applicable |
| Kernel32.dll | 6.0.6002.19623 | 894,976 | 18-Mar-2016 | 17:09 | x86 | Not applicable |
| Kernel32.dll | 6.0.6002.24078 | 895,488 | 15-Mar-2017 | 15:20 | x86 | Not applicable |
| Ntdll.dll | 6.0.6002.19623 | 1,208,568 | 21-Mar-2016 | 22:57 | x86 | Not applicable |
| Ntdll.dll | 6.0.6002.24078 | 1,209,080 | 16-Mar-2017 | 00:44 | x86 | Not applicable |
| Ntkrnlpa.exe | 6.0.6002.19741 | 3,610,856 | 09-Feb-2017 | 17:11 | Not applicable | Not applicable |
| Ntoskrnl.exe | 6.0.6002.19741 | 3,558,120 | 09-Feb-2017 | 17:11 | Not applicable | Not applicable |
| Ntkrnlpa.exe | 6.0.6002.24078 | 3,613,416 | 15-Mar-2017 | 15:26 | Not applicable | Not applicable |
| Ntoskrnl.exe | 6.0.6002.24078 | 3,561,704 | 15-Mar-2017 | 15:26 | Not applicable | Not applicable |
| Rpcrt4.dll | 6.0.6002.19598 | 783,872 | 06-Feb-2016 | 02:12 | x86 | Not applicable |
| Rpcrt4.dll | 6.0.6002.24078 | 783,872 | 15-Mar-2017 | 15:21 | x86 | Not applicable |
| Smss.exe | 6.0.6002.19598 | 64,000 | 06-Feb-2016 | 00:32 | x86 | Not applicable |
| Smss.exe | 6.0.6002.24078 | 64,512 | 15-Mar-2017 | 14:21 | x86 | Not applicable |
| Wordpad.exe | 6.0.6002.19755 | 340,480 | 15-Mar-2017 | 14:32 | x86 | Not applicable |
| Wordpad.exe | 6.0.6002.24078 | 339,968 | 15-Mar-2017 | 14:29 | x86 | Not applicable |
Related
packetstorm
packetstorm
Microsoft Office Word Malicious Hta Execution
2017-04-24 00:00:00
Microsoft RTF Remote Code Execution
2017-04-19 00:00:00
Microsoft Word MTA Handler Remote Code Execution
2017-06-27 00:00:00
myhack58
myhack58
thn
thn
Not Just Criminals, But Governments Were Also Using MS Word 0-Day Exploit
2017-04-12 21:41:00
Petya Ransomware Spreading Rapidly Worldwide, Just Like WannaCry
2017-06-27 03:32:00
Indian-Made Mobile Spyware Targeted Human Rights Activist in Togo
2021-10-11 09:21:00
securelist
securelist
RevengeHotels: cybercrime targeting hotel front desks worldwide
2019-11-28 10:00:48
The BlueNoroff cryptocurrency hunt is still on
2022-01-13 09:00:23
APT Trends report Q3 2017
2017-11-14 09:41:27
threatpost
threatpost
Stealthy Malware Hidden in Images Takes to GoogleUserContent
2018-07-19 19:29:29
Spy Campaign Spams Pro-Tibet Group With ExileRAT
2019-02-04 20:45:00
AZORult Campaign Adopts Novel Triple-Encryption Technique
2020-02-03 20:58:25
fireeye
fireeye
CVE-2017-0199: In the Wild Attacks Leveraging HTA Handler
2017-04-11 13:30:00
CVE-2017-0199: In the Wild Attacks Leveraging HTA Handler
2017-04-11 13:30:00
zdt
zdt
Microsoft Word - .RTF Remote Code Execution Exploit
2017-04-19 00:00:00
Microsoft Office / WordPad Remote Code Execution Vulnerability
2017-04-16 00:00:00
Microsoft Office Word Malicious Hta Execution Exploit
2017-04-25 00:00:00
mskb
mskb
Description of the security update for Office 2013: April 11, 2017
2017-04-11 07:00:00
Description of the security update for Office 2016: April 11, 2017
2017-04-11 07:00:00
Description of the security update for Office 2010: April 11, 2017
2017-04-11 07:00:00
exploitpack
exploitpack
Microsoft Word - .RTF Remote Code Execution
2017-04-18 00:00:00
Microsoft Office - Composite Moniker Remote Code Execution
2018-01-09 00:00:00
openvas
openvas
Microsoft Office Suite Remote Code Execution Vulnerability (KB3141529)
2017-04-12 00:00:00
Microsoft Office Suite Remote Code Execution Vulnerability (KB3178703)
2017-04-12 00:00:00
Microsoft Office Suite Remote Code Execution Vulnerability (KB3178710)
2017-04-12 00:00:00
saint
saint
Microsoft Word and WordPad RTF HTA handler command execution
2017-04-20 00:00:00
Microsoft Word and WordPad RTF HTA handler command execution
2017-04-20 00:00:00
Microsoft Word and WordPad RTF HTA handler command execution
2017-04-20 00:00:00
malwarebytes
malwarebytes
Blocks for Flash and others coming to Office 365
2018-06-01 15:00:00
Fake IRS notice delivers customized spying tool
2017-09-21 15:00:24
Magecart Group 4: A link with Cobalt Group?
2019-10-03 15:00:00
metasploit
metasploit
Microsoft Office Word Malicious Hta Execution
2017-04-15 02:32:48
cisa_kev
cisa_kev
Microsoft Office and WordPad Remote Code Execution Vulnerability
2021-11-03 00:00:00
mscve
mscve
Microsoft Office/WordPad Remote Code Execution Vulnerability w/Windows
2017-04-11 07:00:00
talosblog
talosblog
New campaign uses government, union-themed lures to deliver Cobalt Strike beacons
2022-09-28 12:12:00
Threat Round Up For Sept 8 - Sept 15
2017-09-15 13:10:00
ExileRAT shares C2 with LuckyCat, targets Tibet
2019-02-04 08:00:00
prion
prion
Remote code execution
2017-04-12 14:59:00
hivepro
hivepro
Actors, Threats and Vulnerabilities 08 to 14 May 2023
2023-05-16 06:27:25
mssecure
mssecure
rapid7community
rapid7community
Patch Tuesday - April 2017
2017-04-12 03:13:07
Metasploit Weekly Wrapup
2017-05-05 20:37:48
cert
cert
Microsoft OLE URL Moniker improperly handles remotely-linked HTA data
2017-04-10 00:00:00
seebug
seebug
Microsoft Office OLE2Link vulnerability (CVE-2017-0199)
2017-04-12 00:00:00
checkpoint_advisories
checkpoint_advisories
Microsoft Outlook Remote Code Execution (CVE-2017-0199)
2017-04-11 00:00:00
attackerkb
attackerkb
CVE-2017-0199
2017-04-12 00:00:00
nessus
nessus
Security Update for Microsoft Office Products (April 2017) (Petya)
2017-04-12 00:00:00
cve
cve
CVE-2017-0199
2017-04-12 14:59:00
ics
ics
Dridex Malware
2020-06-30 12:00:00
Iranian Government-Sponsored Actors Conduct Cyber Operations Against Global Government and Commercial Networks
2022-02-24 12:00:00
Top 10 Routinely Exploited Vulnerabilities
2020-05-12 12:00:00
exploitdb
exploitdb
Microsoft Word - '.RTF' Remote Code Execution
2017-04-18 00:00:00
Microsoft Office - 'Composite Moniker Remote Code Execution
2018-01-09 00:00:00
avleonov
avleonov
Petya the Great and why *they* don’t patch vulnerabilities
2017-06-29 21:29:50
kaspersky
kaspersky
KLA11024 Defense-in-Depth Update for Microsoft Office
2017-04-11 00:00:00
KLA11059 Multiple vulnerabilities in Microsoft Windows
2017-04-11 00:00:00
canvas
canvas
Immunity Canvas: OFFICE_WSDL
2017-09-13 01:29:00
trellix
trellix
qualysblog
qualysblog
7.8 High
CVSS3
Attack Vector
LOCAL
Attack Complexity
LOW
Privileges Required
NONE
User Interaction
REQUIRED
Scope
UNCHANGED
Confidentiality Impact
HIGH
Integrity Impact
HIGH
Availability Impact
HIGH
CVSS:3.0/AV:L/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H
8.4 High
AI Score
Confidence
High
9.3 High
CVSS2
Access Vector
NETWORK
Access Complexity
MEDIUM
Authentication
NONE
Confidentiality Impact
COMPLETE
Integrity Impact
COMPLETE
Availability Impact
COMPLETE
AV:N/AC:M/Au:N/C:C/I:C/A:C
0.974 High
EPSS
Percentile
99.9%
Related for KB4014793