CVE-2017-0199

Known Exploited Vulnerability

Microsoft Office and WordPad Remote Code Execution Vulnerability

Vendor / product: Microsoft / Office and WordPad

Description

Microsoft Office 2007 SP3, Microsoft Office 2010 SP2, Microsoft Office 2013 SP1, Microsoft Office 2016, Microsoft Windows Vista SP2, Windows Server 2008 SP2, Windows 7 SP1, Windows 8.1 allow remote attackers to execute arbitrary code via a crafted document, aka "Microsoft Office/WordPad Remote Code Execution Vulnerability w/Windows API."

Primary references

• secure@microsoft.com — Exploit, Third Party Advisory
• secure@microsoft.com — Broken Link, Third Party Advisory, VDB Entry
• secure@microsoft.com — Broken Link, Third Party Advisory, VDB Entry
• secure@microsoft.com — Exploit, Third Party Advisory
• secure@microsoft.com — Third Party Advisory, US Government Resource
• secure@microsoft.com — Patch, Vendor Advisory
• secure@microsoft.com — Exploit, Third Party Advisory, VDB Entry
• secure@microsoft.com — Exploit, Third Party Advisory, VDB Entry
• secure@microsoft.com — Third Party Advisory, VDB Entry
• secure@microsoft.com — Broken Link, Exploit, Third Party Advisory
• secure@microsoft.com — Exploit, Third Party Advisory
• af854a3a-2127-422b-91ae-364da2661108 — Exploit, Third Party Advisory