Lucene search
K
Database
Vendors
Products
Years
CVSS
Scanner
Agent Scanning
API Scanning
Manual Audit
Perimeter Scanner
Scanning
Projects
Email
Webhook
Plugins
Resources
Documents
Blog
Glossary
FAQ
Pricing
Contacts
About Us
Partners
Branding Guideline
cveMicrosoftCVE-2017-0003
HistoryJan 10, 2017 - 9:59 p.m.

CVE-2017-0003

2017-01-1021:59:00
CWE-119
microsoft
web.nvd.nist.gov
83
cve-2017-0003
microsoft word
sharepoint enterprise server 2016
remote code execution
memory corruption
vulnerability

CVSS2

9.3

Attack Vector

NETWORK

Attack Complexity

MEDIUM

Authentication

NONE

Confidentiality Impact

COMPLETE

Integrity Impact

COMPLETE

Availability Impact

COMPLETE

AV:N/AC:M/Au:N/C:C/I:C/A:C

CVSS3

7.8

Attack Vector

LOCAL

Attack Complexity

LOW

Privileges Required

NONE

User Interaction

REQUIRED

Scope

UNCHANGED

Confidentiality Impact

HIGH

Integrity Impact

HIGH

Availability Impact

HIGH

CVSS:3.0/AV:L/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H

AI Score

7.6

Confidence

High

EPSS

0.218

Percentile

96.5%

JSON

Microsoft Word 2016 and SharePoint Enterprise Server 2016 allow remote attackers to execute arbitrary code via a crafted document, aka “Microsoft Office Memory Corruption Vulnerability.”

Affected configurations

Nvd
Node
microsoftsharepoint_enterprise_serverMatch2016
OR
microsoftwordMatch2016
VendorProductVersionCPE
microsoftsharepoint_enterprise_server2016cpe:2.3:a:microsoft:sharepoint_enterprise_server:2016:*:*:*:*:*:*:*
microsoftword2016cpe:2.3:a:microsoft:word:2016:*:*:*:*:*:*:*

Related

mskb 3
cvelist 1
nvd 1
checkpoint_advisories 1
openvas 2
symantec 1
kaspersky 1
prion 1
nessus 1
mscve 1
threatpost 1
thn 1
mskb
mskb
MS17-002: Description of the security update for Word 2016: January 10, 2017
2017-01-10 08:00:00
MS17-002: Description of the security update for SharePoint Server 2016: January 10, 2017
2017-01-10 08:00:00
MS17-002: Security Update for Microsoft Office: January 10, 2017
2017-01-10 00:00:00
cvelist
cvelist
CVE-2017-0003
2017-01-10 21:00:00
nvd
nvd
CVE-2017-0003
2017-01-10 21:59:00
checkpoint_advisories
checkpoint_advisories
Microsoft Office Memory Corruption (MS17-002: CVE-2017-0003)
2017-01-10 00:00:00
openvas
openvas
Microsoft Office Word Remote Code Execution Vulnerability (3214291)
2017-01-11 00:00:00
Microsoft SharePoint Server Remote Code Execution Vulnerability (3214291)
2017-01-11 00:00:00
symantec
symantec
Microsoft Office CVE-2017-0003 Memory Corruption Vulnerability
2017-01-10 00:00:00
kaspersky
kaspersky
KLA10939 Arbitrary code execution vulnerability in Microsoft Office Word 2016 and Microsoft SharePoint Enterprise Server 2016
2017-01-10 00:00:00
prion
prion
Memory corruption
2017-01-10 21:59:00
nessus
nessus
MS17-002: Security Update for Microsoft Office (3214291)
2017-01-10 00:00:00
mscve
mscve
Microsoft Office Memory Corruption Vulnerability
2017-01-10 08:00:00
threatpost
threatpost
Microsoft Issues Record Low Number of Patch Tuesday Bulletins
2017-01-10 15:52:02
thn
thn
Microsoft Releases 4 Security Updates — Smallest Patch Tuesday Ever!
2017-01-10 22:26:00

CVSS2

9.3

Attack Vector

NETWORK

Attack Complexity

MEDIUM

Authentication

NONE

Confidentiality Impact

COMPLETE

Integrity Impact

COMPLETE

Availability Impact

COMPLETE

AV:N/AC:M/Au:N/C:C/I:C/A:C

CVSS3

7.8

Attack Vector

LOCAL

Attack Complexity

LOW

Privileges Required

NONE

User Interaction

REQUIRED

Scope

UNCHANGED

Confidentiality Impact

HIGH

Integrity Impact

HIGH

Availability Impact

HIGH

CVSS:3.0/AV:L/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H

AI Score

7.6

Confidence

High

EPSS

0.218

Percentile

96.5%

JSON
Related for CVE-2017-0003
mskb3cvelist1nvd1checkpoint_advisories1openvas2symantec1kaspersky1prion1nessus1mscve1threatpost1thn1