9.3

CVE-2017-0260

EPSS 28.43%
Published 15.06.2017 01:29:01
Last modified 20.04.2025 01:37:25
Source secure@microsoft.com
Teams watchlist Login
Open Login

A remote code execution vulnerability exists in Microsoft Office when the software fails to properly handle objects in memory, aka "Office Remote Code Execution Vulnerability". This CVE ID is unique from CVE-2017-8509, CVE-2017-8510, CVE-2017-8511, CVE-2017-8512, and CVE-2017-8506.

Affected products Warnungen 0 Metrics 3 CWE 0 References 6

Data is provided by the National Vulnerability Database (NVD)

Microsoft ≫ Office Version2013 Updatesp1

Microsoft ≫ Office Version2016

Microsoft ≫ Windows 7 Updatesp1

Microsoft ≫ Windows Server 2008 Updatesp2

Microsoft ≫ Windows Server 2008 Versionr2 Updatesp1

Zu dieser CVE wurde keine CISA KEV oder CERT.AT-Warnung gefunden.

EPSS Metriken
Type	Source	Score	Percentile
EPSS	FIRST.org	28.43%	0.963

CVSS Metriken
Source	Base Score	Exploit Score	Impact Score	Vector string
nvd@nist.gov	7.8	1.8	5.9	CVSS:3.0/AV:L/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H
nvd@nist.gov	9.3	8.6	10	AV:N/AC:M/Au:N/C:C/I:C/A:C

http://www.securityfocus.com/bid/98810

Third Party Advisory

VDB Entry

http://www.securitytracker.com/id/1038668

https://portal.msrc.microsoft.com/en-US/security-guidance/advisory/CVE-2017-0260

Patch

Vendor Advisory

https://nvd.nist.gov/vuln/detail/CVE-2017-0260

CVE Source (NVD)

https://cveawg.mitre.org/api/cve/CVE-2017-0260

CVE Source (JSON)

https://euvd.enisa.europa.eu/vulnerability/CVE-2017-0260

EUVD