CVE-2017-8570KEV · OVERDUE

Microsoft Office Remote Code Execution Vulnerability

High · published July 11, 2017

Patch now

Confirmed exploited, and the score agrees

CVSS calls it high at 7.8. It is confirmed in active exploitation. It sits in the 99.8th percentile for exploit probability.

1519
days past CISA
deadline
CVSS v3.1
7.8
EPSS
90%
Percentile
99.8
In the wild
Confirmed
What it is

🚨 Your Microsoft Office might just be a gateway for chaos! A remote code execution vulnerability lurking in its memory handling could let attackers take complete control. 🔥 Think of it like a restaurant where a waiter can take orders but, instead of verifying them, immediately delivers anything anyone requests — a recipe for disaster! If an attacker can exploit this, they could serve up harmful commands with no one the wiser. An attacker could execute malicious code remotely, potentially compromising sensitive data and wreaking havoc on your system. This could lead to data breaches, loss of integrity, and an absolute mess for your operations.

Put simply

Think of it like a restaurant where a waiter can take orders but, instead of verifying them, immediately delivers anything anyone requests — a recipe for disaster! If an attacker can exploit this, they could serve up harmful commands with no one the wiser. This vulnerability arises from the mishandling of objects in memory within Microsoft Office, allowing for arbitrary code execution. Simply put, it's like a faulty safety mechanism that lets any unverified command run without question.

What to do

An attacker could execute malicious code remotely, potentially compromising sensitive data and wreaking havoc on your system. This could lead to data breaches, loss of integrity, and an absolute mess for your operations. To protect your systems, ensure you apply the latest security updates from Microsoft immediately. Additionally, educate users about safe practices, such as not opening suspicious files or links. Implementing robust endpoint protection can also help mitigate risks. You've got this! With these steps, you'll reinforce your defenses and keep your systems secure. 🛡️

The record
Technical detail
CVSS v3.1
7.8 · HIGH
Vector
CVSS:3.1/AV:L/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H
CVSS v4.0
Not supplied
EPSS
0.89889 · 99.8th percentile
Published
2017-07-11T21:00Z
KEV added
2022-02-25 · due 2022-08-25
EPSS history
Timeline
  • 25 FEB 00:00Z
    Added to CISA KEV — remediate by Aug 25
    kev
  • 11 JUL 21:00Z
    Microsoft Office allows a remote code execution vulnerability due to the way that it handles objects in memory, aka "Microsoft Office Remote Code Execution…
    cvelistv5