9.3

CVE-2017-8506

EPSS 33.91%
Veröffentlicht 15.06.2017 01:29:03
Zuletzt bearbeitet 20.04.2025 01:37:25
Quelle secure@microsoft.com
CVE-Watchlists
Login
Unerledigt
Login

A remote code execution vulnerability exists in Microsoft Office when the software fails to properly handle objects in memory, aka "Office Remote Code Execution Vulnerability". This CVE ID is unique from CVE-2017-8509, CVE-2017-8510, CVE-2017-8511, CVE-2017-8512, and CVE-2017-0260.

Betroffene Produkte Warnungen 0 Metriken 3 CWE 0 Referenzen 6

Daten sind bereitgestellt durch National Vulnerability Database (NVD)

Microsoft ≫ Outlook Version2010 Updatesp2

Microsoft ≫ Outlook Version2013 Updatesp1

Microsoft ≫ Outlook Version2013 Updatesp1 SwEditionrt

Microsoft ≫ Outlook Version2016

Zu dieser CVE wurde keine CISA KEV oder CERT.AT-Warnung gefunden.

EPSS Metriken
Typ	Quelle	Score	Percentile
EPSS	FIRST.org	33.91%	0.965

CVSS Metriken
Quelle	Base Score	Exploit Score	Impact Score	Vector String
nvd@nist.gov	7.8	1.8	5.9	CVSS:3.0/AV:L/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H
nvd@nist.gov	9.3	8.6	10	AV:N/AC:M/Au:N/C:C/I:C/A:C

http://www.securityfocus.com/bid/98811

Third Party Advisory

VDB Entry

http://www.securitytracker.com/id/1038666

Third Party Advisory

VDB Entry

https://portal.msrc.microsoft.com/en-US/security-guidance/advisory/CVE-2017-8506

Patch

Vendor Advisory

https://nvd.nist.gov/vuln/detail/CVE-2017-8506

CVE Source (NVD)

https://cveawg.mitre.org/api/cve/CVE-2017-8506

CVE Source (JSON)

https://euvd.enisa.europa.eu/vulnerability/CVE-2017-8506

EUVD