9.3

CVE-2017-8506

EPSS 33.91%
Published 15.06.2017 01:29:03
Last modified 20.04.2025 01:37:25
Source secure@microsoft.com
Teams watchlist Login
Open Login

A remote code execution vulnerability exists in Microsoft Office when the software fails to properly handle objects in memory, aka "Office Remote Code Execution Vulnerability". This CVE ID is unique from CVE-2017-8509, CVE-2017-8510, CVE-2017-8511, CVE-2017-8512, and CVE-2017-0260.

Affected products Warnungen 0 Metrics 3 CWE 0 References 6

Data is provided by the National Vulnerability Database (NVD)

Microsoft ≫ Outlook Version2010 Updatesp2

Microsoft ≫ Outlook Version2013 Updatesp1

Microsoft ≫ Outlook Version2013 Updatesp1 SwEditionrt

Microsoft ≫ Outlook Version2016

Zu dieser CVE wurde keine CISA KEV oder CERT.AT-Warnung gefunden.

EPSS Metriken
Type	Source	Score	Percentile
EPSS	FIRST.org	33.91%	0.965

CVSS Metriken
Source	Base Score	Exploit Score	Impact Score	Vector string
nvd@nist.gov	7.8	1.8	5.9	CVSS:3.0/AV:L/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H
nvd@nist.gov	9.3	8.6	10	AV:N/AC:M/Au:N/C:C/I:C/A:C

http://www.securityfocus.com/bid/98811

Third Party Advisory

VDB Entry

http://www.securitytracker.com/id/1038666

Third Party Advisory

VDB Entry

https://portal.msrc.microsoft.com/en-US/security-guidance/advisory/CVE-2017-8506

Patch

Vendor Advisory

https://nvd.nist.gov/vuln/detail/CVE-2017-8506

CVE Source (NVD)

https://cveawg.mitre.org/api/cve/CVE-2017-8506

CVE Source (JSON)

https://euvd.enisa.europa.eu/vulnerability/CVE-2017-8506

EUVD