VDB

GCVE-110-CERTCC-2017-421280

GCVE-110-CERTCC-2017-421280
Advisory PublishedCVSS 7.5/10
Vulnetix · Advisory published November 14, 2017
Microsoft Equation Editor contains a stack buffer overflow, which can allow a remote, unauthenticated attacker to execute arbitrary code on a vulnerable system.
Download JSON Open in Console

Risk Scores

CVSS 2.0
7.5/10
High · AV:N/AC:L/Au:N/C:P/I:P/A:P
certcc-cam
certcc-cam
impact0population0exploitation0widely_known0score_current0ease_of_exploitation0
certcc-vrda
certcc-vrda
d1_impact4d1_population4d1_direct_report0
certcc-cvss-temporal-env
certcc-cvss-temporal-env
temporal_score5.5remediation_levelOFreport_confidenceCenvironmental_score5.53490539908862target_distributionHenvironmental_vectorCDP:ND/TD:H/CR:ND/IR:ND/AR:ND

Aliases

CVE-2017-11882

References

Microsoft Office Equation Editor stack buffer overflow
url
Microsoft Office Equation Editor stack buffer overflow
advisory
Microsoft Office Equation Editor stack buffer overflow
advisory
Microsoft Office Equation Editor stack buffer overflow
advisory
Microsoft Office Equation Editor stack buffer overflow
advisory
Microsoft Office Equation Editor stack buffer overflow
advisory
Microsoft Office Equation Editor stack buffer overflow
advisory
Microsoft Office Equation Editor stack buffer overflow
advisory
Microsoft Office Equation Editor stack buffer overflow
advisory
Microsoft Office Equation Editor stack buffer overflow
advisory

Browse GCVE Records

75,710 records in the GCVE database · Updated August 1, 2026

No matching records found.

Explore Further

Investigate this vulnerability in the interactive console or download the raw GCVE record.

Open in Console Download JSON
$ Console Community · 100/wk Open console ›