Lucene search

MicrosoftCVE-2017-8567

HistorySep 13, 2017 - 1:29 a.m.

CVE-2017-8567

2017-09-1301:29:09

CWE-119

microsoft

web.nvd.nist.gov

cve-2017-8567

remote code execution

microsoft excel

mac 2011

nvd

CVSS2

9.3

Attack Vector

NETWORK

Attack Complexity

MEDIUM

Authentication

NONE

Confidentiality Impact

COMPLETE

Integrity Impact

COMPLETE

Availability Impact

COMPLETE

AV:N/AC:M/Au:N/C:C/I:C/A:C

CVSS3

7.8

Attack Vector

LOCAL

Attack Complexity

LOW

Privileges Required

NONE

User Interaction

REQUIRED

Scope

UNCHANGED

Confidentiality Impact

HIGH

Integrity Impact

HIGH

Availability Impact

HIGH

CVSS:3.0/AV:L/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H

EPSS

0.188

Percentile

96.3%

JSON

A remote code execution vulnerability exists in Microsoft Excel for Mac 2011 when it fails to properly handle objects in memory, aka “Microsoft Office Remote Code Execution”.

Affected configurations

Nvd

Vulners

Node

microsoftexcel_for_macMatch2011

VendorProductVersionCPE
microsoftexcel_for_mac2011cpe:2.3:a:microsoft:excel_for_mac:2011:*:*:*:*:*:*:*

Vendor	Product	Version	CPE
microsoft	excel_for_mac	2011	cpe:2.3:a:microsoft:excel_for_mac:2011:::::::*

CNA Affected

[
  {
    "product": "Microsoft Office",
    "vendor": "Microsoft Corporation",
    "versions": [
      {
        "status": "affected",
        "version": "Microsoft Excel for Mac 2011"
      }
    ]
  }
]