Lucene search
K
Database
Vendors
Products
Years
CVSS
Scanner
Agent Scanning
API Scanning
Manual Audit
Perimeter Scanner
Scanning
Projects
Email
Webhook
Plugins
Resources
Documents
Blog
Glossary
FAQ
Pricing
Contacts
About Us
Partners
Branding Guideline
nvd[email protected]NVD:CVE-2017-8631
HistorySep 13, 2017 - 1:29 a.m.

CVE-2017-8631

2017-09-1301:29:09
[email protected]
web.nvd.nist.gov
7

CVSS2

9.3

Attack Vector

NETWORK

Attack Complexity

MEDIUM

Authentication

NONE

Confidentiality Impact

COMPLETE

Integrity Impact

COMPLETE

Availability Impact

COMPLETE

AV:N/AC:M/Au:N/C:C/I:C/A:C

CVSS3

7.8

Attack Vector

LOCAL

Attack Complexity

LOW

Privileges Required

NONE

User Interaction

REQUIRED

Scope

UNCHANGED

Confidentiality Impact

HIGH

Integrity Impact

HIGH

Availability Impact

HIGH

CVSS:3.1/AV:L/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H

EPSS

0.351

Percentile

97.2%

JSON

A remote code execution vulnerability exists in Excel Services, Microsoft Excel 2007 Service Pack 3, Microsoft Excel 2010 Service Pack 2, Microsoft Excel 2013 Service Pack 1, Microsoft Excel 2013 RT Service Pack 1, Microsoft Excel 2016, Microsoft Office Web Apps 2013, Microsoft Office Compatibility Pack Service Pack 3, Microsoft Excel Web App 2013 Service Pack 1, Microsoft Excel Viewer 2007 Service Pack 3, and Office Online Server when they fail to properly handle objects in memory, aka “Microsoft Office Memory Corruption Vulnerability”. This CVE ID is unique from CVE-2017-8630, CVE-2017-8632, and CVE-2017-8744.

Affected configurations

Nvd
Node
microsoftexcelMatch2007
OR
microsoftexcelMatch2010
OR
microsoftexcelMatch2013
OR
microsoftexcelMatch2013sp1
OR
microsoftexcelMatch2016
OR
microsoftexcel_viewerMatch2007sp3
OR
microsoftexcel_web_appMatch2013sp1
OR
microsoftoffice_compatibility_packMatch-sp3
OR
microsoftoffice_online_server
OR
microsoftoffice_web_appsMatch2013
VendorProductVersionCPE
microsoftexcel2007cpe:2.3:a:microsoft:excel:2007:*:*:*:*:*:*:*
microsoftexcel2010cpe:2.3:a:microsoft:excel:2010:*:*:*:*:*:*:*
microsoftexcel2013cpe:2.3:a:microsoft:excel:2013:*:*:*:*:*:*:*
microsoftexcel2013cpe:2.3:a:microsoft:excel:2013:sp1:*:*:*:*:*:*
microsoftexcel2016cpe:2.3:a:microsoft:excel:2016:*:*:*:*:*:*:*
microsoftexcel_viewer2007cpe:2.3:a:microsoft:excel_viewer:2007:sp3:*:*:*:*:*:*
microsoftexcel_web_app2013cpe:2.3:a:microsoft:excel_web_app:2013:sp1:*:*:*:*:*:*
microsoftoffice_compatibility_pack-cpe:2.3:a:microsoft:office_compatibility_pack:-:sp3:*:*:*:*:*:*
microsoftoffice_online_server*cpe:2.3:a:microsoft:office_online_server:*:*:*:*:*:*:*:*
microsoftoffice_web_apps2013cpe:2.3:a:microsoft:office_web_apps:2013:*:*:*:*:*:*:*

Related

prion 4
nvd 3
cve 4
cvelist 4
openvas 15
mskb 16
nessus 7
symantec 4
mscve 4
zdi 2
checkpoint_advisories 1
kaspersky 1
talosblog 1
trendmicroblog 1
prion
prion
Remote code execution
2017-09-13 01:29:00
Remote code execution
2017-09-13 01:29:00
Remote code execution
2017-09-13 01:29:00
nvd
nvd
CVE-2017-8630
2017-09-13 01:29:09
CVE-2017-8632
2017-09-13 01:29:09
CVE-2017-8744
2017-09-13 01:29:11
cve
cve
CVE-2017-8630
2017-09-13 01:29:09
CVE-2017-8632
2017-09-13 01:29:09
CVE-2017-8631
2017-09-13 01:29:09
cvelist
cvelist
CVE-2017-8632
2017-09-13 01:00:00
CVE-2017-8631
2017-09-13 01:00:00
CVE-2017-8630
2017-09-13 01:00:00
openvas
openvas
Microsoft Excel 2013 Service Pack 1 Multiple Vulnerabilities (KB4011108)
2017-09-13 00:00:00
Microsoft Office Compatibility Pack Service Pack 3 Multiple Vulnerabilities (KB4011064)
2017-09-13 00:00:00
Microsoft Excel 2016 Multiple Vulnerabilities (KB4011050)
2017-09-13 00:00:00
mskb
mskb
Description of the security update for Microsoft Office Compatibility Pack Service Pack 3: September 12, 2017
2017-09-12 07:00:00
Description of the security update for Excel 2016: September 12, 2017
2017-09-12 07:00:00
Description of the security update for Excel 2010: September 12, 2017
2017-09-12 07:00:00
nessus
nessus
Security Update for Microsoft Office Excel Products (September 2017)
2017-09-12 00:00:00
Security Updates for Microsoft Office Compatibility Pack SP3 (September 2017)
2017-09-12 00:00:00
Security Update for Microsoft Office (September 2017) (macOS)
2017-09-12 00:00:00
symantec
symantec
Microsoft Office CVE-2017-8630 Remote Code Execution Vulnerability
2017-09-12 00:00:00
Microsoft Office CVE-2017-8744 Remote Code Execution Vulnerability
2017-09-12 00:00:00
Microsoft Office CVE-2017-8632 Remote Code Execution Vulnerability
2017-09-12 00:00:00
mscve
mscve
Microsoft Office Remote Code Execution Vulnerability
2017-09-12 07:00:00
Microsoft Office Remote Code Execution Vulnerability
2017-09-12 07:00:00
Microsoft Office Remote Code Execution Vulnerability
2017-09-12 07:00:00
zdi
zdi
Microsoft Office Word WordPerfect Document Converter Heap-based Buffer Overflow Remote Code Execution Vulnerability
2017-09-12 00:00:00
Microsoft Office Excel xlsb File Heap-based Buffer Overflow Remote Code Execution Vulnerability
2017-09-15 00:00:00
checkpoint_advisories
checkpoint_advisories
Microsoft Office WordPerfect Document Converter Heap-based Buffer Overflow (CVE-2017-8744)
2017-09-25 00:00:00
kaspersky
kaspersky
KLA11100 Multiple vulnerabilities in Microsoft Office
2017-09-12 00:00:00
talosblog
talosblog
Microsoft Patch Tuesday - September 2017
2017-09-12 15:41:00
trendmicroblog
trendmicroblog
TippingPoint Threat Intelligence and Zero-Day Coverage – Week of September 11, 2017
2017-09-15 14:59:53

CVSS2

9.3

Attack Vector

NETWORK

Attack Complexity

MEDIUM

Authentication

NONE

Confidentiality Impact

COMPLETE

Integrity Impact

COMPLETE

Availability Impact

COMPLETE

AV:N/AC:M/Au:N/C:C/I:C/A:C

CVSS3

7.8

Attack Vector

LOCAL

Attack Complexity

LOW

Privileges Required

NONE

User Interaction

REQUIRED

Scope

UNCHANGED

Confidentiality Impact

HIGH

Integrity Impact

HIGH

Availability Impact

HIGH

CVSS:3.1/AV:L/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H

EPSS

0.351

Percentile

97.2%

JSON
Related for NVD:CVE-2017-8631
prion4nvd3cve4cvelist4openvas15mskb16nessus7symantec4mscve4zdi2checkpoint_advisories1kaspersky1talosblog1trendmicroblog1