CVE-2017-0020

EPSS 16.4%

Vexday Risk Score

8Baixo

Decisão SSVC (CISA)

Track

Sem sinal de exploração → monitorar

CVSS —EPSS 16.4%KEV nãoPoC —Nuclei —Metasploit —Patch —

Ciclo de vida

17 mar 2017Publicada no NVD

Recomendação: Monitorar — sem sinal de exploração no momento.

Microsoft Excel 2016, Excel 2010 SP2, Excel 2013 RT SP1, and Office Web Apps Server 2013 SP1 allow remote attackers to execute arbitrary code or cause a denial of service (memory corruption) via a crafted document, aka "Microsoft Office Memory Corruption Vulnerability." This vulnerability is different from those described in CVE-2017-0006, CVE-2017-0019, CVE-2017-0030, CVE-2017-0031, CVE-2017-0052, and CVE-2017-0053.

Produtos afetados

Microsoft Corporation · Office

Quer saber se a sua infraestrutura está exposta a isto?

Falar com a TrueHacking →

Referências

https://portal.msrc.microsoft.com/en-US/security-guidance/advisory/CVE-2017-0020 http://www.securityfocus.com/bid/96050 http://www.securitytracker.com/id/1038010