CVE-2017-0006: Buffer Overflow

Published Mar 17, 2017

Updated

Microsoft Excel 2007 SP3, Office Compatibility Pack SP3, Excel Viewer, and Excel Services on SharePoint Server 2007 SP3 allow remote attackers to execute arbitrary code or cause a denial of service (memory corruption) via a crafted document, aka "Microsoft Office Memory Corruption Vulnerability." This vulnerability is different from those described in CVE-2017-0019, CVE-2017-0020, CVE-2017-0030, CVE-2017-0031, CVE-2017-0052, and CVE-2017-0053.

Affected Software

4 affected components

Microsoft Excel=2007-sp3

Microsoft Excel Viewer

Microsoft Office Compatibility Pack=sp3

Microsoft SharePoint Server=2007-sp3

Remediation

Patch Available

https://portal.msrc.microsoft.com/en-US/security-guidance/advisory/CVE-2017-0006

Event History

Mar 17, 2017

CVE Published

via MITRE·12:00 AM

Data Sourced

via MITRE·12:00 AM

DescriptionWeakness

Frequently Asked Questions

What is the severity of CVE-2017-0006?

CVE-2017-0006 has a high severity rating due to its potential to allow remote code execution and memory corruption.

How do I fix CVE-2017-0006?

To mitigate CVE-2017-0006, users should apply the latest security patches provided by Microsoft for affected versions of Excel and related software.

What software is affected by CVE-2017-0006?

CVE-2017-0006 affects Microsoft Excel 2007 SP3, Excel Viewer, Office Compatibility Pack SP3, and SharePoint Server 2007 SP3.

Can CVE-2017-0006 be exploited remotely?

Yes, CVE-2017-0006 can be exploited remotely through a crafted document file.

What type of attack does CVE-2017-0006 facilitate?

CVE-2017-0006 can facilitate remote code execution or cause a denial of service through memory corruption.