Lucene search
K
Database
Vendors
Products
Years
CVSS
Scanner
Agent Scanning
API Scanning
Manual Audit
Perimeter Scanner
Scanning
Projects
Email
Webhook
Plugins
Resources
Documents
Blog
Glossary
FAQ
Pricing
Contacts
About Us
Partners
Branding Guideline
nvd[email protected]NVD:CVE-2017-0053
HistoryMar 17, 2017 - 12:59 a.m.

CVE-2017-0053

2017-03-1700:59:01
CWE-119
[email protected]
web.nvd.nist.gov
6

CVSS2

9.3

Attack Vector

NETWORK

Attack Complexity

MEDIUM

Authentication

NONE

Confidentiality Impact

COMPLETE

Integrity Impact

COMPLETE

Availability Impact

COMPLETE

AV:N/AC:M/Au:N/C:C/I:C/A:C

CVSS3

7.8

Attack Vector

LOCAL

Attack Complexity

LOW

Privileges Required

NONE

User Interaction

REQUIRED

Scope

UNCHANGED

Confidentiality Impact

HIGH

Integrity Impact

HIGH

Availability Impact

HIGH

CVSS:3.0/AV:L/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H

AI Score

7.7

Confidence

High

EPSS

0.129

Percentile

95.5%

JSON

Microsoft Office 2010 SP2, Office Compatibility Pack SP3, Word 2007 SP3, Word 2010 SP2, Word 2013 SP1, Word 2013 R2 SP1, Word 2016, and Word Viewer allow remote attackers to execute arbitrary code or cause a denial of service (memory corruption) via a crafted document, aka “Microsoft Office Memory Corruption Vulnerability.” This vulnerability is different from those described in CVE-2017-0006, CVE-2017-0019, CVE-2017-0020, CVE-2017-0030, CVE-2017-0031, and CVE-2017-0052.

Affected configurations

Nvd
Node
microsoftofficeMatch2010sp2
OR
microsoftoffice_compatibility_packsp3
OR
microsoftwordMatch2007sp3
OR
microsoftwordMatch2010sp2
OR
microsoftwordMatch2013sp1
OR
microsoftwordMatch2013sp1rt
OR
microsoftwordMatch2016
OR
microsoftword_viewer
VendorProductVersionCPE
microsoftoffice2010cpe:2.3:a:microsoft:office:2010:sp2:*:*:*:*:*:*
microsoftoffice_compatibility_pack*cpe:2.3:a:microsoft:office_compatibility_pack:*:sp3:*:*:*:*:*:*
microsoftword2007cpe:2.3:a:microsoft:word:2007:sp3:*:*:*:*:*:*
microsoftword2010cpe:2.3:a:microsoft:word:2010:sp2:*:*:*:*:*:*
microsoftword2013cpe:2.3:a:microsoft:word:2013:sp1:*:*:*:*:*:*
microsoftword2013cpe:2.3:a:microsoft:word:2013:sp1:*:*:rt:*:*:*
microsoftword2016cpe:2.3:a:microsoft:word:2016:*:*:*:*:*:*:*
microsoftword_viewer*cpe:2.3:a:microsoft:word_viewer:*:*:*:*:*:*:*:*

Related

prion 7
avleonov 1
cvelist 7
nvd 6
cve 7
nessus 2
mskb 19
openvas 9
kaspersky 1
checkpoint_advisories 6
mscve 7
symantec 7
prion
prion
Memory corruption
2017-03-17 00:59:00
Memory corruption
2017-03-17 00:59:00
Memory corruption
2017-03-17 00:59:00
avleonov
avleonov
Downloading and analyzing NVD CVE feed
2017-10-02 23:27:35
cvelist
cvelist
CVE-2017-0020
2017-03-17 00:00:00
CVE-2017-0030
2017-03-17 00:00:00
CVE-2017-0052
2017-03-17 00:00:00
nvd
nvd
CVE-2017-0019
2017-03-17 00:59:00
CVE-2017-0052
2017-03-17 00:59:01
CVE-2017-0006
2017-03-17 00:59:00
cve
cve
CVE-2017-0053
2017-03-17 00:59:01
CVE-2017-0020
2017-03-17 00:59:00
CVE-2017-0006
2017-03-17 00:59:00
nessus
nessus
MS17-014: Security Update for Microsoft Office (4013241)
2017-03-15 00:00:00
MS17-014: Security Update for Microsoft Office (4013241) (macOS)
2017-03-15 00:00:00
mskb
mskb
MS17-014: Security Update for Microsoft Office: March 14, 2017
2017-03-14 00:00:00
MS17-014: Description of the security update for Microsoft Office Compatibility Pack Service Pack 3: March 14, 2017
2017-03-14 07:00:00
Security update 2017-03-14
2017-03-14 07:00:00
openvas
openvas
Microsoft Office Word Multiple Vulnerabilities (4013241)
2017-03-15 00:00:00
Microsoft Office Excel Multiple Vulnerabilities (4013241)
2017-03-15 00:00:00
Microsoft Windows Excel Viewer Memory Corruption Vulnerabilities (4013241)
2017-03-15 00:00:00
kaspersky
kaspersky
KLA10981 Multiple vulnerabilities in Microsoft Office
2017-03-14 00:00:00
checkpoint_advisories
checkpoint_advisories
Microsoft Office Memory Corruption (MS17-014: CVE-2017-0052)
2017-03-14 00:00:00
Microsoft Office Memory Corruption (MS17-014: CVE-2017-0019)
2017-03-14 00:00:00
Microsoft Office Memory Corruption (MS17-014: CVE-2017-0030)
2017-03-14 00:00:00
mscve
mscve
Microsoft Office Memory Corruption Vulnerability
2017-03-14 07:00:00
Microsoft Office Memory Corruption Vulnerability
2017-03-14 07:00:00
Microsoft Office Memory Corruption Vulnerability
2017-03-14 07:00:00
symantec
symantec
Microsoft Office CVE-2017-0052 Memory Corruption Vulnerability
2017-03-14 00:00:00
Microsoft Office CVE-2017-0019 Memory Corruption Vulnerability
2017-03-14 00:00:00
Microsoft Office CVE-2017-0030 Memory Corruption Vulnerability
2017-03-14 00:00:00

CVSS2

9.3

Attack Vector

NETWORK

Attack Complexity

MEDIUM

Authentication

NONE

Confidentiality Impact

COMPLETE

Integrity Impact

COMPLETE

Availability Impact

COMPLETE

AV:N/AC:M/Au:N/C:C/I:C/A:C

CVSS3

7.8

Attack Vector

LOCAL

Attack Complexity

LOW

Privileges Required

NONE

User Interaction

REQUIRED

Scope

UNCHANGED

Confidentiality Impact

HIGH

Integrity Impact

HIGH

Availability Impact

HIGH

CVSS:3.0/AV:L/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H

AI Score

7.7

Confidence

High

EPSS

0.129

Percentile

95.5%

JSON
Related for NVD:CVE-2017-0053
prion7avleonov1cvelist7nvd6cve7nessus2mskb19openvas9kaspersky1checkpoint_advisories6mscve7symantec7