VDB
BDU%3A2018-00096
BDU%3A2018-00096
PUBLISHED
CVSS 9.300000190734863 CRITICAL
Уязвимость пакета программ Microsoft Office, вызванная выходом операции за границы буфера в памяти, позволяющая нарушителю выполнить произвольный код
Risk Scores
CVSS 2.0
9.300000190734863
Affected Products
| Vendor | Product | Versions |
|---|---|---|
| Microsoft Corp | Microsoft Office 2010 Service Pack 2, Microsoft Office 2013 Service Pack 1, Microsoft Office 2007 Service Pack 3, Microsoft Office 2016 |
Timeline
- Nov 23, 2017 PoC Published
- Jan 24, 2018 CVE Published
- Jul 13, 2019 PoC Published
- Jan 8, 2020 PoC Published
- Apr 6, 2023 PoC Published
- Jul 22, 2023 PoC Published
- Aug 29, 2024 PoC Published
- Sep 24, 2024 CVE Updated
- Mar 18, 2026 Security Advisory
References
- http://reversingminds-blog.logdown.com/posts/3907313-fileless-attack-in-word-without-macros-cve-2017-11882 url
- http://www.securityfocus.com/bid/101757 url
- http://www.securitytracker.com/id/1039783 url
- https://0patch.blogspot.com/2017/11/did-microsoft-just-manually-patch-their.html url
- https://0patch.blogspot.com/2017/11/official-patch-for-cve-2017-11882-meets.html url
- https://embedi.com/blog/skeleton-closet-ms-office-vulnerability-you-didnt-know-about url
- https://github.com/0x09AL/CVE-2017-11882-metasploit url
- https://github.com/embedi/CVE-2017-11882 url
- https://github.com/unamer/CVE-2017-11882 url
- https://portal.msrc.microsoft.com/en-US/security-guidance/advisory/CVE-2017-11882 url
- https://www.exploit-db.com/exploits/43163/ url
- https://www.kb.cert.org/vuls/id/421280 url
- https://threats.kaspersky.com/ru/threat/Exploit.MSOffice.CVE-2017-11882.gen url
- https://www.cisa.gov/sites/default/files/csv/known_exploited_vulnerabilities.csv url