CVE Catalog

CVE-2017-0053

High
Published: Translated: NVD NIST

Summary

A vulnerability in Microsoft Office and Word allows remote attackers to execute arbitrary code or cause a denial of service through a crafted document. This affects multiple versions of Office and Word.

Risk Assessment

Organizations may be exposed to remote attacks that could lead to data loss or unauthorized access to systems.

Recommendation

It is recommended to update the software to the latest versions and implement security measures that restrict the opening of unknown documents.

Other vulnerabilities in Microsoft Office 2010 SP2, Office Compatibility Pack SP3, Word 2007 SP3, Word 2010 SP2, Word 2013 SP1, Word 2013 R2 SP1, Word 2016, Word Viewer

Original NVD description (English source)

Microsoft Office 2010 SP2, Office Compatibility Pack SP3, Word 2007 SP3, Word 2010 SP2, Word 2013 SP1, Word 2013 R2 SP1, Word 2016, and Word Viewer allow remote attackers to execute arbitrary code or cause a denial of service (memory corruption) via a crafted document, aka "Microsoft Office Memory Corruption Vulnerability." This vulnerability is different from those described in CVE-2017-0006, CVE-2017-0019, CVE-2017-0020, CVE-2017-0030, CVE-2017-0031, and CVE-2017-0052.

Vulnerability data from NVD (NIST) · CISA KEV · EPSS