KLA11055 Multiple vulnerabilities in Microsoft Office

Multiple serious vulnerabilities have been found in Microsoft Office. Malicious users can exploit these vulnerabilities to obtain sensitive information, gain privileges, bypass security restrictions and spoof user interface.

Below is a complete list of vulnerabilities:

1. An incorrect handling of objects in memory in certain functions can be exploited remotely by convincing a user to open a specially designed document file;
2. An improper sanitizing of web requests can be exploited remotely by sending an email message or hosting a website with a specially designed URL and convincing a user to open it to gain privileges;
3. An incorrect parsing of file formats can be exploited remotely by convincing a user to open a specially designed file to bypass security restrictions;
4. An improper sanitizing of HTML tags can be exploited remotely by sending an email message with specially disigned HTML tags to spoof user interface;
5. An improper parsing of email messages can be exploited remotely by convincing a user to open or preview a specially designed email message to execute arbitrary code.

Original advisories

CVE-2017-0207

CVE-2017-0195

CVE-2017-0204

CVE-2017-0194

CVE-2017-0106

CVE-2017-0194

CVE-2017-0195

CVE-2017-0207

CVE-2017-0204

CVE-2017-0106

Exploitation

Malware exists for this vulnerability. Usually such malware is classified as Exploit. More details.

Related products

Microsoft-Office-Compatibility-Pack-for-Word,-Excel,-and-PowerPoint-2007-File-Formats

Microsoft-Office

Microsoft-Outlook

Microsoft-Excel

CVE list

CVE-2017-0194 warning

CVE-2017-0195 warning

CVE-2017-0207 warning

CVE-2017-0204 warning

CVE-2017-0106 critical

KB list

3212218

3191827

3191830

3191847

3101522

3127895

3178724

3178725

3191840

3191845

3118388

3127890

3172519

3178664

Solution

Install necessary updates from the KB section, that are listed in your Windows Update (Windows Update usually can be accessed from the Control Panel)

Impacts

• OSI

Obtain sensitive information. Exploitation of vulnerabilities with this impact can lead to capturing by abuser information, critical for user or system.

• SB

Security bypass. Exploitation of vulnerabilities with this impact can lead to performing actions restricted by current security settings.

• PE

Privilege escalation. Exploitation of vulnerabilities with this impact can lead to performing by abuser actions, which are normally disallowed for current role.

• SUI

Spoof user interface. Exploitation of vulnerabilities with this impact can lead to changes in user interface to beguile user into inaccurate behavior.

Affected Products

• Microsoft Excel 2007 Service Pack 3Microsoft Excel 2010 Service Pack 2Microsoft Office Compatibility Pack Service Pack 2Microsoft Outlook 2007 Service Pack 3Microsoft Outlook 2010 Service Pack 2Microsoft Outlook 2013 Service Pack 1Microsoft Outlook 2016Microsoft Outlook for Mac 2011