Lucene search
K
Database
Vendors
Products
Years
CVSS
Scanner
Agent Scanning
API Scanning
Manual Audit
Perimeter Scanner
Scanning
Projects
Email
Webhook
Plugins
Resources
Documents
Blog
Glossary
FAQ
Pricing
Contacts
About Us
Partners
Branding Guideline
nvd[email protected]NVD:CVE-2017-11884
HistoryNov 15, 2017 - 3:29 a.m.

CVE-2017-11884

2017-11-1503:29:01
CWE-119
[email protected]
web.nvd.nist.gov
11

CVSS2

9.3

Attack Vector

NETWORK

Attack Complexity

MEDIUM

Authentication

NONE

Confidentiality Impact

COMPLETE

Integrity Impact

COMPLETE

Availability Impact

COMPLETE

AV:N/AC:M/Au:N/C:C/I:C/A:C

CVSS3

7.8

Attack Vector

LOCAL

Attack Complexity

LOW

Privileges Required

NONE

User Interaction

REQUIRED

Scope

UNCHANGED

Confidentiality Impact

HIGH

Integrity Impact

HIGH

Availability Impact

HIGH

CVSS:3.0/AV:L/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H

AI Score

8.2

Confidence

High

EPSS

0.974

Percentile

99.9%

JSON

Microsoft Excel 2016 Click-to-Run (C2R) allows an attacker to run arbitrary code in the context of the current user by failing to properly handle objects in memory, aka “Microsoft Office Memory Corruption Vulnerability”. This CVE ID is unique from CVE-2017-11882.

Affected configurations

Nvd
Node
microsoftexcelMatch2016click-to-run
VendorProductVersionCPE
microsoftexcel2016cpe:2.3:a:microsoft:excel:2016:*:*:*:click-to-run:*:*:*

Related

prion 2
cvelist 2
cve 2
threatpost 162
attackerkb 1
nvd 1
zdi 1
symantec 2
mscve 2
thn 7
talosblog 1
securelist 8
malwarebytes 2
cisa_kev 1
zdt 1
myhack58 1
packetstorm 1
openvas 1
checkpoint_advisories 1
prion
prion
Memory corruption
2017-11-15 03:29:00
Memory corruption
2017-11-15 03:29:00
cvelist
cvelist
CVE-2017-11882
2017-11-15 03:00:00
CVE-2017-11884
2017-11-15 03:00:00
cve
cve
CVE-2017-11884
2017-11-15 03:29:01
CVE-2017-11882
2017-11-15 03:29:01
threatpost
threatpost
Microsoft Patches 17-Year-Old Office Bug
2017-11-15 13:11:21
The Inside Story of the Kelihos Botnet Takedown
2011-09-29 15:10:41
Microsoft Plans To Fix 16 Vulnerabilities With July Patch Release
2012-07-06 15:03:10
attackerkb
attackerkb
CVE-2017-11882
2017-11-15 00:00:00
nvd
nvd
CVE-2017-11882
2017-11-15 03:29:01
zdi
zdi
Microsoft Office Excel XLS File Parsing Use-After-Free Remote Code Execution Vulnerability
2017-12-06 00:00:00
symantec
symantec
Microsoft Office CVE-2017-11884 Memory Corruption Vulnerability
2017-11-14 00:00:00
Microsoft Office CVE-2017-11882 Memory Corruption Vulnerability
2017-11-14 00:00:00
mscve
mscve
Microsoft Excel Remote Code Execution Vulnerability
2017-11-14 08:00:00
Microsoft Office Memory Corruption Vulnerability
2017-11-14 08:00:00
thn
thn
TA558 Hackers Weaponize Images for Wide-Scale Malware Attacks
2024-04-16 13:39:00
Chinese Hackers Carried Out Country-Level Watering Hole Attack
2018-06-14 15:10:00
'Lone Wolf' Hacker Group Targeting Afghanistan and India with Commodity RATs
2021-10-22 15:01:00
talosblog
talosblog
Malicious campaign uses a barrage of commodity RATs to target Afghanistan and India
2021-10-26 13:13:13
securelist
securelist
Spam and phishing in Q2 2019
2019-08-28 10:00:28
FIN7.5: the infamous cybercrime rig “FIN7” continues its activities
2019-05-08 10:00:04
Spam and phishing in Q1 2020
2020-05-26 10:00:50
malwarebytes
malwarebytes
Beware of malware offering “Warm greetings from Saudi Aramco”
2022-03-05 17:35:27
FormBook spam campaign targets citizens of Ukraine️
2022-03-09 19:35:09
cisa_kev
cisa_kev
Microsoft Office Memory Corruption Vulnerability
2021-11-03 00:00:00
zdt
zdt
Microsoft Office - OLE Remote Code Execution Exploit
2017-11-21 00:00:00
myhack58
myhack58
The use of a posture clear odd 11882 format overflow document analysis-vulnerability warning-the black bar safety net
2018-11-09 00:00:00
packetstorm
packetstorm
Microsoft Office Equation Editor Code Execution
2017-12-06 00:00:00
openvas
openvas
Microsoft Office 2016 Remote Code Execution Vulnerability (KB4011262)
2017-11-15 00:00:00
checkpoint_advisories
checkpoint_advisories
Microsoft Office Memory Corruption Remote Code Execution (CVE-2017-11882)
2017-11-21 00:00:00

CVSS2

9.3

Attack Vector

NETWORK

Attack Complexity

MEDIUM

Authentication

NONE

Confidentiality Impact

COMPLETE

Integrity Impact

COMPLETE

Availability Impact

COMPLETE

AV:N/AC:M/Au:N/C:C/I:C/A:C

CVSS3

7.8

Attack Vector

LOCAL

Attack Complexity

LOW

Privileges Required

NONE

User Interaction

REQUIRED

Scope

UNCHANGED

Confidentiality Impact

HIGH

Integrity Impact

HIGH

Availability Impact

HIGH

CVSS:3.0/AV:L/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H

AI Score

8.2

Confidence

High

EPSS

0.974

Percentile

99.9%

JSON
Related for NVD:CVE-2017-11884
prion2cvelist2cve2threatpost162attackerkb1nvd1zdi1symantec2mscve2thn7talosblog1securelist8malwarebytes2cisa_kev1zdt1myhack581packetstorm1openvas1checkpoint_advisories1