CVE-2017-0052: Buffer Overflow

Published Mar 17, 2017

Updated

Microsoft Office Compatibility Pack SP3, Excel 2007 SP3, Excel Viewer, and Excel Services on SharePoint Server 2007 SP3 allow remote attackers to execute arbitrary code or cause a denial of service (memory corruption) via a crafted document, aka "Microsoft Office Memory Corruption Vulnerability." This vulnerability is different from those described in CVE-2017-0006, CVE-2017-0019, CVE-2017-0020, CVE-2017-0030, CVE-2017-0031, and CVE-2017-0053.

Affected Software

4 affected components

Microsoft Excel=2007-sp3

Microsoft Excel Viewer

Microsoft Office Compatibility Pack=sp3

Microsoft SharePoint Server=2007-sp3

Remediation

Patch Available

https://portal.msrc.microsoft.com/en-US/security-guidance/advisory/CVE-2017-0052

Event History

Mar 17, 2017

CVE Published

via MITRE·12:00 AM

Data Sourced

via MITRE·12:00 AM

DescriptionWeakness

Frequently Asked Questions

What is the severity of CVE-2017-0052?

CVE-2017-0052 is a critical vulnerability that allows remote attackers to execute arbitrary code or cause denial of service.

How do I fix CVE-2017-0052?

To fix CVE-2017-0052, ensure that you install the latest security updates for affected Microsoft products.

Which software is affected by CVE-2017-0052?

CVE-2017-0052 affects Microsoft Office Compatibility Pack SP3, Excel 2007 SP3, Excel Viewer, and SharePoint Server 2007 SP3.

What type of attack can exploit CVE-2017-0052?

CVE-2017-0052 can be exploited through crafted documents that lead to memory corruption.

Is exploitation of CVE-2017-0052 difficult?

Exploitation of CVE-2017-0052 can be relatively easy for attackers, as it only requires a crafted document to trigger the vulnerability.