Lucene search
K
Database
Vendors
Products
Years
CVSS
Scanner
Agent Scanning
API Scanning
Manual Audit
Perimeter Scanner
Scanning
Projects
Email
Webhook
Plugins
Resources
Documents
Blog
Glossary
FAQ
Pricing
Contacts
About Us
Partners
Branding Guideline
prionPRIOn knowledge basePRION:CVE-2017-11882
HistoryNov 15, 2017 - 3:29 a.m.

Memory corruption

2017-11-1503:29:00
PRIOn knowledge base
www.prio-n.com
5

7.8 High

CVSS3

Attack Vector

LOCAL

Attack Complexity

LOW

Privileges Required

NONE

User Interaction

REQUIRED

Scope

UNCHANGED

Confidentiality Impact

HIGH

Integrity Impact

HIGH

Availability Impact

HIGH

CVSS:3.1/AV:L/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H

7.9 High

AI Score

Confidence

High

9.3 High

CVSS2

Access Vector

NETWORK

Access Complexity

MEDIUM

Authentication

NONE

Confidentiality Impact

COMPLETE

Integrity Impact

COMPLETE

Availability Impact

COMPLETE

AV:N/AC:M/Au:N/C:C/I:C/A:C

0.974 High

EPSS

Percentile

99.9%

JSON

Microsoft Office 2007 Service Pack 3, Microsoft Office 2010 Service Pack 2, Microsoft Office 2013 Service Pack 1, and Microsoft Office 2016 allow an attacker to run arbitrary code in the context of the current user by failing to properly handle objects in memory, aka “Microsoft Office Memory Corruption Vulnerability”. This CVE ID is unique from CVE-2017-11884.

References

Related

threatpost 154
attackerkb 1
cvelist 2
cve 2
prion 1
zdi 1
symantec 2
mscve 1
checkpoint_advisories 1
hivepro 1
thn 6
malwarebytes 3
securelist 11
exploitpack 1
myhack58 2
mssecure 1
talosblog 3
mskb 1
metasploit 1
zdt 1
packetstorm 1
cisa_kev 1
openvas 1
threatpost
threatpost
Microsoft Patches 17-Year-Old Office Bug
2017-11-15 13:11:21
December 2013 Microsoft Patch Tuesday Security Updates
2013-12-10 16:09:59
Microsoft to unveil patch management metrics project
2009-04-15 11:45:37
attackerkb
attackerkb
CVE-2017-11882
2017-11-15 00:00:00
cvelist
cvelist
CVE-2017-11884
2017-11-14 00:00:00
CVE-2017-11882
2017-11-14 00:00:00
cve
cve
CVE-2017-11884
2017-11-15 03:29:00
CVE-2017-11882
2017-11-15 03:29:00
prion
prion
Memory corruption
2017-11-15 03:29:00
zdi
zdi
Microsoft Office Excel XLS File Parsing Use-After-Free Remote Code Execution Vulnerability
2017-12-06 00:00:00
symantec
symantec
Microsoft Office CVE-2017-11884 Memory Corruption Vulnerability
2017-11-14 00:00:00
Microsoft Office CVE-2017-11882 Memory Corruption Vulnerability
2017-11-14 00:00:00
mscve
mscve
Microsoft Excel Remote Code Execution Vulnerability
2017-11-14 08:00:00
checkpoint_advisories
checkpoint_advisories
Microsoft Office Memory Corruption Remote Code Execution (CVE-2017-11882)
2017-11-21 00:00:00
hivepro
hivepro
Cloud Atlas Exploits Six-Year-Old Flaw to Target Russian Companies
2023-12-28 14:23:55
thn
thn
U.S. DoJ Dismantles Warzone RAT Infrastructure, Arrests Key Operators
2024-02-11 10:54:00
New Agent Tesla Malware Variant Using ZPAQ Compression in Email Attacks
2023-11-21 11:57:00
SideWinder Hackers Launched Over a 1,000 Cyber Attacks Over the Past 2 Years
2022-05-31 08:30:00
malwarebytes
malwarebytes
Microsoft is now disabling Excel 4.0 macros by default
2022-01-24 15:39:51
FormBook spam campaign targets citizens of Ukraine️
2022-03-09 19:35:09
Beware of malware offering “Warm greetings from Saudi Aramco”
2022-03-05 17:35:27
securelist
securelist
Spam and phishing in 2018
2019-03-12 10:00:16
Spam and phishing in Q2 2020
2020-08-07 10:00:07
Targeted attack on industrial enterprises and public institutions
2022-08-08 08:00:10
exploitpack
exploitpack
Microsoft Office - OLE Remote Code Execution
2017-11-20 00:00:00
myhack58
myhack58
Wary of the use of the Office vulnerabilities to spread commercial spyware AgentTesla-vulnerability warning-the black bar safety net
2019-05-28 00:00:00
The use of a posture clear odd 11882 format overflow document analysis-vulnerability warning-the black bar safety net
2018-11-09 00:00:00
mssecure
mssecure
In hot pursuit of elusive threats: AI-driven behavior-based blocking stops attacks in their tracks
2019-10-08 15:00:11
talosblog
talosblog
New HawkEye Reborn Variant Emerges Following Ownership Change
2019-04-16 11:45:39
It's alive: Threat actors cobble together open-source pieces into monstrous Frankenstein campaign
2019-06-05 00:45:28
Malicious campaign uses a barrage of commodity RATs to target Afghanistan and India
2021-10-26 13:13:13
mskb
mskb
Description of the security update for 2007 Microsoft Office Suite: November 28, 2017
2017-11-14 08:00:00
metasploit
metasploit
Microsoft Office CVE-2017-11882
2017-11-21 19:47:02
zdt
zdt
Microsoft Office - OLE Remote Code Execution Exploit
2017-11-21 00:00:00
packetstorm
packetstorm
Microsoft Office Equation Editor Code Execution
2017-12-06 00:00:00
cisa_kev
cisa_kev
Microsoft Office Memory Corruption Vulnerability
2021-11-03 00:00:00
openvas
openvas
Microsoft Office 2016 Remote Code Execution Vulnerability (KB4011262)
2017-11-15 00:00:00

7.8 High

CVSS3

Attack Vector

LOCAL

Attack Complexity

LOW

Privileges Required

NONE

User Interaction

REQUIRED

Scope

UNCHANGED

Confidentiality Impact

HIGH

Integrity Impact

HIGH

Availability Impact

HIGH

CVSS:3.1/AV:L/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H

7.9 High

AI Score

Confidence

High

9.3 High

CVSS2

Access Vector

NETWORK

Access Complexity

MEDIUM

Authentication

NONE

Confidentiality Impact

COMPLETE

Integrity Impact

COMPLETE

Availability Impact

COMPLETE

AV:N/AC:M/Au:N/C:C/I:C/A:C

0.974 High

EPSS

Percentile

99.9%

JSON
Related for PRION:CVE-2017-11882
threatpost154attackerkb1cvelist2cve2prion1zdi1symantec2mscve1checkpoint_advisories1hivepro1thn6malwarebytes3securelist11exploitpack1myhack582mssecure1talosblog3mskb1metasploit1zdt1packetstorm1cisa_kev1openvas1