CVE-2017-8570

Quick assessment

Copy summary Copy citation

Affected

Microsoft Corporation Microsoft Office 2007 SP3, Microsoft Office 2010 SP2, Microsoft Office 2013 SP1, and Microsoft Office 2016.

Exploitation

Confirmed exploitation in the wild; remediate immediately

Recommended action

Check the vendor advisory and references for a fixed version. If immediate upgrade is impossible, restrict exposure and increase monitoring.

Microsoft Office是美国微软（Microsoft）公司开发的一款办公软件套件产品。常用组件有Word、Excel、Access、Powerpoint、FrontPage等。 Microsoft Office中存在远程代码执行漏洞，该漏洞源于程序没有正确的处理内存中的对象。远程攻击者可借助特制的文件利用该漏洞在当前用户的上下文中执行任意代码或造成拒绝服务。以下版本受到影响：Microsoft Office 2007 SP3，Office 2010 SP2，Office 2013 RT SP1，

CVE-2017-8570 affects Microsoft Corporation Microsoft Office 2007 SP3, Microsoft Office 2010 SP2, Microsoft Office 2013 SP1, and Microsoft Office 2016.. Confirmed exploitation in the wild; remediate immediately. Microsoft Office是美国微软（Microsoft）公司开发的一款办公软件套件产品。常用组件有Word、Excel、Access、Powerpoint、FrontPage等。 Microsoft Office中存在远程代码执行漏洞，该漏洞源于程序没有正确的处理内存中的对象。远程攻击者可借助特制的文件利用该漏洞在当前用户的上下文中执行任意代码或造成 CVE-2017-8570 vulnerability details, Shenlong CVE Platform, https://cve.imfht.com/detail/CVE-2017-8570

I. Basic Information for CVE-2017-8570

Affected Products

II. Public POCs for CVE-2017-8570

III. Intelligence Information for CVE-2017-8570

Vendor Advisories for CVE-2017-8570 (2)

• https://portal.msrc.microsoft.com/en-us/security-guidance/advisory/CVE-2017-8570 x_refsource_CONFIRM
• http://www.securityfocus.com/bid/99445 vdb-entry x_refsource_BID

Other References for CVE-2017-8570 (3)

• https://github.com/rxwx/CVE-2017-8570 x_refsource_MISC
• https://github.com/tezukanice/Office8570 x_refsource_MISC
• https://github.com/ParsingTeam/ppsx-file-generator x_refsource_MISC

• https://www.cve.org/CVERecord?id=CVE-2017-8570

Same Patch Batch · Microsoft Corporation · 2017-07-11 · 54 CVEs total

Showing top 20 of 54 CVEs. View all on vendor page → →

IV. Related Vulnerabilities

V. Comments for CVE-2017-8570