Lucene search
K
Database
Vendors
Products
Years
CVSS
Scanner
Agent Scanning
API Scanning
Manual Audit
Perimeter Scanner
Scanning
Projects
Email
Webhook
Plugins
Resources
Documents
Blog
Glossary
FAQ
Pricing
Contacts
About Us
Partners
Branding Guideline
nvd[email protected]NVD:CVE-2017-8508
HistoryJun 15, 2017 - 1:29 a.m.

CVE-2017-8508

2017-06-1501:29:03
[email protected]
web.nvd.nist.gov
9

CVSS2

4.3

Attack Vector

NETWORK

Attack Complexity

MEDIUM

Authentication

NONE

Confidentiality Impact

NONE

Integrity Impact

PARTIAL

Availability Impact

NONE

AV:N/AC:M/Au:N/C:N/I:P/A:N

CVSS3

5.5

Attack Vector

LOCAL

Attack Complexity

LOW

Privileges Required

NONE

User Interaction

REQUIRED

Scope

UNCHANGED

Confidentiality Impact

NONE

Integrity Impact

HIGH

Availability Impact

NONE

CVSS:3.0/AV:L/AC:L/PR:N/UI:R/S:U/C:N/I:H/A:N

AI Score

5.7

Confidence

High

EPSS

0.001

Percentile

51.0%

JSON

A security feature bypass vulnerability exists in Microsoft Office software when it improperly handles the parsing of file formats, aka “Microsoft Office Security Feature Bypass Vulnerability”.

Affected configurations

Nvd
Node
microsoftoutlookMatch2007sp3
OR
microsoftoutlookMatch2010sp2
OR
microsoftoutlookMatch2013sp1
OR
microsoftoutlookMatch2016
VendorProductVersionCPE
microsoftoutlook2007cpe:2.3:a:microsoft:outlook:2007:sp3:*:*:*:*:*:*
microsoftoutlook2010cpe:2.3:a:microsoft:outlook:2010:sp2:*:*:*:*:*:*
microsoftoutlook2013cpe:2.3:a:microsoft:outlook:2013:sp1:*:*:*:*:*:*
microsoftoutlook2016cpe:2.3:a:microsoft:outlook:2016:*:*:*:*:*:*:*

Related

prion 1
cvelist 1
symantec 1
cve 1
mscve 1
openvas 4
mskb 4
nessus 2
kaspersky 1
talosblog 1
trendmicroblog 1
prion
prion
Security feature bypass
2017-06-15 01:29:00
cvelist
cvelist
CVE-2017-8508
2017-06-15 01:00:00
symantec
symantec
Microsoft Office CVE-2017-8508 Security Bypass Vulnerability
2017-06-13 00:00:00
cve
cve
CVE-2017-8508
2017-06-15 01:29:03
mscve
mscve
Microsoft Outlook Security Feature Bypass Vulnerability
2017-06-13 07:00:00
openvas
openvas
Microsoft Outlook 2007 Service Pack 3 Multiple Vulnerabilities (KB3191898)
2017-06-14 00:00:00
Microsoft Outlook 2016 Multiple Vulnerabilities (KB3191932)
2017-06-14 00:00:00
Microsoft Outlook 2013 Service Pack 1 Multiple Vulnerabilities (KB3191938)
2017-06-14 00:00:00
mskb
mskb
Description of the security update for Outlook 2007: June 13, 2017
2017-06-13 07:00:00
Description of the security update for Outlook 2010: June 13, 2017
2017-06-13 07:00:00
Description of the security update for Outlook 2013: June 13, 2017
2017-06-13 07:00:00
nessus
nessus
Security Updates for Outlook (September 2017)
2017-09-25 00:00:00
Security Update for Microsoft Office Products (June 2017)
2017-06-14 00:00:00
kaspersky
kaspersky
KLA11049 Multiple vulnerabilities in Microsoft Office
2017-06-13 00:00:00
talosblog
talosblog
Microsoft Patch Tuesday - June 2017
2017-06-13 13:48:00
trendmicroblog
trendmicroblog
TippingPoint Threat Intelligence and Zero-Day Coverage – Week of June 12, 2017
2017-06-16 12:00:40

CVSS2

4.3

Attack Vector

NETWORK

Attack Complexity

MEDIUM

Authentication

NONE

Confidentiality Impact

NONE

Integrity Impact

PARTIAL

Availability Impact

NONE

AV:N/AC:M/Au:N/C:N/I:P/A:N

CVSS3

5.5

Attack Vector

LOCAL

Attack Complexity

LOW

Privileges Required

NONE

User Interaction

REQUIRED

Scope

UNCHANGED

Confidentiality Impact

NONE

Integrity Impact

HIGH

Availability Impact

NONE

CVSS:3.0/AV:L/AC:L/PR:N/UI:R/S:U/C:N/I:H/A:N

AI Score

5.7

Confidence

High

EPSS

0.001

Percentile

51.0%

JSON
Related for NVD:CVE-2017-8508
prion1cvelist1symantec1cve1mscve1openvas4mskb4nessus2kaspersky1talosblog1trendmicroblog1