Podatność CVE-2017-11826

Podatność CVE-2017-11826

Publikacja: 2017-10-13

Opis:

Typ:

(Improper Restriction of Operations within the Bounds of a Memory Buffer)

Ogólna skala CVSS	Znaczenie	Łatwość wykorzystania
9.3/10	10/10	8.6/10

Affected software
Microsoft -> Office
Microsoft -> Office online server
Microsoft -> Office web apps
Microsoft -> Sharepoint enterprise server
Microsoft -> Sharepoint server
Microsoft -> Web applications
Microsoft -> WORD
Microsoft -> Word viewer

http://www.securityfocus.com/bid/101219

http://www.securitytracker.com/id/1039541

https://0patch.blogspot.com/2017/11/0patching-pretty-nasty-microsoft-word.html

https://portal.msrc.microsoft.com/en-US/security-guidance/advisory/CVE-2017-11826

https://securingtomorrow.mcafee.com/mcafee-labs/analyzing-microsoft-office-zero-day-exploit-cve-2017-11826-memory-corruption-vulnerability/

https://www.tarlogic.com/en/blog/exploiting-word-cve-2017-11826/