CVE-2017-8509

CVE-2017-8509

High · published June 15, 2017

CVSS v3.0
8.8
EPSS
18%
Percentile
97.2
In the wild
Unconfirmed
What it is

A remote code execution vulnerability exists in Microsoft Office when the software fails to properly handle objects in memory, aka "Office Remote Code Execution Vulnerability". This CVE ID is unique from CVE-2017-8510, CVE-2017-8511, CVE-2017-8512, CVE-2017-0260, and CVE-2017-8506.

The record
Technical detail
CVSS v3.0
8.8 · HIGH
Vector
CVSS:3.0/AV:N/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H
CVSS v4.0
Not supplied
EPSS
0.18238 · 97.2th percentile
Published
2017-06-15T05:29Z
Affected products (17)
ProductVersionsFixed in
microsoft/officeall versions—
microsoft/officeall versions—
microsoft/officeall versions—
microsoft/officeall versions—
microsoft/office_compatibility_packall versions—
microsoft/office_web_appsall versions—
microsoft/office_web_apps_serverall versions—
microsoft/onenoteall versions—
microsoft/sharepoint_serverall versions—
microsoft/sharepoint_serverall versions—
microsoft/sharepoint_serverall versions—
microsoft/wordall versions—
microsoft/wordall versions—
microsoft/wordall versions—
microsoft/wordall versions—
microsoft/wordall versions—
microsoft/word_for_macall versions—
References (4)
http://www.securityfocus.com/bid/98812 · [email protected]https://portal.msrc.microsoft.com/en-US/security-guidance/advisory/CVE-2017-8509 · [email protected]http://www.securityfocus.com/bid/98812 · af854a3a-2127-422b-91ae-364da2661108https://portal.msrc.microsoft.com/en-US/security-guidance/advisory/CVE-2017-8509 · af854a3a-2127-422b-91ae-364da2661108
EPSS history
Timeline
  • 15 JUN 01:00Z
    A remote code execution vulnerability exists in Microsoft Office when the software fails to properly handle objects in memory, aka "Office Remote Code…
    cvelistv5