CVE-2017-0031: Buffer Overflow
Microsoft Office 2010 SP2, Office Compatibility Pack SP3, Word 2007 SP3, and Word 2010 SP2 allow remote attackers to execute arbitrary code or cause a denial of service (memory corruption) via a crafted document, aka "Microsoft Office Memory Corruption Vulnerability." This vulnerability is different from those described in CVE-2017-0006, CVE-2017-0019, CVE-2017-0020, CVE-2017-0030, CVE-2017-0052, and CVE-2017-0053.
Affected Software
Remediation
Event History
Frequently Asked Questions
What is the severity of CVE-2017-0031?
CVE-2017-0031 is considered a critical vulnerability that allows remote code execution due to memory corruption in Microsoft Office products.
How do I fix CVE-2017-0031?
To fix CVE-2017-0031, it is recommended to install the latest security updates from Microsoft for the affected Office products.
Which versions of Microsoft Office are affected by CVE-2017-0031?
CVE-2017-0031 affects Microsoft Office 2010 SP2, Office Compatibility Pack SP3, Word 2007 SP3, and Word 2010 SP2.
What kind of attack does CVE-2017-0031 enable?
CVE-2017-0031 enables remote attackers to execute arbitrary code or cause a denial of service through a crafted document.
Is there any workaround for CVE-2017-0031 if I cannot update immediately?
While the best solution is to update, users may consider restricting the opening of documents from unknown sources to reduce risk from CVE-2017-0031.