CVE-2017-0019
HighSummary
Microsoft Word 2016 allows remote attackers to execute arbitrary code or cause a denial of service (memory corruption) via a crafted document. This vulnerability is different from those described in other CVEs.
Risk Assessment
Organizations may be exposed to remote attacks that could lead to data loss or disruption of system operations.
Recommendation
It is recommended to update Microsoft Word 2016 to the latest version and implement appropriate security measures to minimize the risk of attacks.
Other vulnerabilities in Microsoft Word 2016
See all- CVE-2023-29335High
A vulnerability in Microsoft Word allows for a security feature bypass, potentially leading to unauthorized access to user data.
- CVE-2016-3316High
Microsoft Word 2013 SP1, 2013 RT SP1, 2016, and 2016 for Mac allow remote attackers to execute arbitrary code via a crafted file, known as 'Microsoft Office Memory Corruption Vulnerability.'
- CVE-2023-21716Critical
Remote code execution vulnerability in Microsoft Word. An attacker could exploit this vulnerability to execute arbitrary code in the context of the logged-on user.
- CVE-2021-38656High
Vulnerability in Microsoft Word allows remote code execution. An attacker could exploit it to run arbitrary code on the victim's system.
- CVE-2024-21379High
A vulnerability in Microsoft Word allows remote code execution. An attacker could exploit this flaw to run malicious code on the victim's machine.
- CVE-2022-41103Medium
Information Disclosure vulnerability in Microsoft Word. Could allow an attacker to read data that should not be accessible.
- CVE-2022-41061High
A vulnerability in Microsoft Word allows for remote code execution, potentially leading to full control over the user's system. An attacker can exploit this flaw through malicious Word documents.
- CVE-2022-41060Medium
A vulnerability in Microsoft Word allows information disclosure. An attacker could exploit this flaw to access data that should be protected.
- CVE-2021-42296High
A vulnerability in Microsoft Word allows for remote code execution. An attacker can exploit this flaw to execute malicious code on the victim's system.
- CVE-2021-36941High
Remote code execution vulnerability in Microsoft Word. Opening a specially crafted document could allow an attacker to execute code.
Original NVD description (English source)
Microsoft Word 2016 allows remote attackers to execute arbitrary code or cause a denial of service (memory corruption) via a crafted document, aka "Microsoft Office Memory Corruption Vulnerability." This vulnerability is different from those described in CVE-2017-0006, CVE-2017-0020, CVE-2017-0030, CVE-2017-0031, CVE-2017-0052, and CVE-2017-0053.