Vulnetix
Try Vulnetix Request Demo
CVE-2017-11854 PUBLISHED CVSS 8.800000190734863 HIGH

Microsoft Word 2007 Service Pack 3, Microsoft Word 2010 Service Pack 2, Microsoft Office 2010 Service Pack 2, and Microsoft Office Compatibility Pack Service Pack 3 allow an attacker to run arbitrary code in the context of the current user by failing to properly handle objects in memory, aka "Microsoft Word Memory Corruption Vulnerability".

EPSS 18.88% · 95.2th percentile

Risk Scores

CVSS v3.0
8.800000190734863
CVSS:3.0/AV:N/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H
EPSS Score
18.88%
95.2th percentile

Affected Products

VendorProductVersions
Microsoft CorporationMicrosoft OfficeMicrosoft Word 2007 Service Pack 3, Microsoft Word 2010 Service Pack 2, Microsoft Office 2010 Service Pack 2, and Microsoft Office Compatibility Pack Service Pack 3
microsoftoffice2010
microsoftoffice_compatibility_pack
microsoftword2007, 2010

Timeline

References

Open in Interactive Console →