CVE-2017-0030: Buffer Overflow

Published Mar 17, 2017

Updated

Microsoft Office 2010 SP2, Office Compatibility Pack SP3, Office Web Apps Server 2010 SP2, Word 2007 SP3, Word 2010 SP2, and Word Automation Services on SharePoint Server 2010 SP2 allow remote attackers to execute arbitrary code or cause a denial of service (memory corruption) via a crafted document, aka "Microsoft Office Memory Corruption Vulnerability." This vulnerability is different from those described in CVE-2017-0006, CVE-2017-0019, CVE-2017-0020, CVE-2017-0031, CVE-2017-0052, and CVE-2017-0053.

Affected Software

6 affected components

Microsoft Office=2010-sp2

Microsoft Office Compatibility Pack=sp3

Microsoft Office Web Apps=2010-sp2

Microsoft SharePoint Server=2010-sp2

Microsoft Word=2007-sp3

Microsoft Word=2010-sp2

Remediation

Patch Available

https://portal.msrc.microsoft.com/en-US/security-guidance/advisory/CVE-2017-0030

Event History

Mar 17, 2017

CVE Published

via MITRE·12:00 AM

Data Sourced

via MITRE·12:00 AM

DescriptionWeakness

Frequently Asked Questions

What is the severity of CVE-2017-0030?

CVE-2017-0030 is classified with high severity due to its potential for remote code execution and denial of service.

How do I fix CVE-2017-0030?

To fix CVE-2017-0030, ensure that all affected Microsoft Office software is updated with the latest security patches provided by Microsoft.

What products are affected by CVE-2017-0030?

CVE-2017-0030 affects Microsoft Office 2010 SP2, Office Compatibility Pack SP3, Word 2007 SP3, Word 2010 SP2, Office Web Apps Server 2010 SP2, and SharePoint Server 2010 SP2.

What kind of attack does CVE-2017-0030 allow?

CVE-2017-0030 allows remote attackers to execute arbitrary code or cause a denial of service through a crafted document.

Is there a workaround for CVE-2017-0030?

Currently, there are no specific workarounds for CVE-2017-0030 other than applying the necessary security updates.