CVE-2017-0199: Microsoft Office and WordPad Remote Code Execution Vulnerability
Microsoft Office 2007 SP3, Microsoft Office 2010 SP2, Microsoft Office 2013 SP1, Microsoft Office 2016, Microsoft Windows Vista SP2, Windows Server 2008 SP2, Windows 7 SP1, Windows 8.1 allow remote attackers to execute arbitrary code via a crafted document, aka "Microsoft Office/WordPad Remote Code Execution Vulnerability w/Windows API."
Other sources
Microsoft Office and WordPad contain an unspecified vulnerability due to the way the applications parse specially crafted files. Successful exploitation allows for remote code execution.
— CISA
Affected Software
Remediation
Event History
Frequently Asked Questions
What is the severity of CVE-2017-0199?
CVE-2017-0199 has a critical severity rating due to its ability to allow remote code execution through specially crafted documents.
How do I fix CVE-2017-0199?
To fix CVE-2017-0199, users should apply the latest security updates provided by Microsoft for the affected versions of Office and Windows.
What software is affected by CVE-2017-0199?
CVE-2017-0199 affects multiple versions of Microsoft Office, including Office 2007 SP3, 2010 SP2, 2013 SP1, and 2016, along with various Windows operating systems.
How does CVE-2017-0199 exploit work?
CVE-2017-0199 exploits vulnerabilities in Microsoft Office and WordPad to execute arbitrary code via crafted documents, allowing remote attackers to gain control.
Is there a workaround for CVE-2017-0199?
While the best solution is to apply patches, users can mitigate the risk of CVE-2017-0199 by avoiding opening untrusted documents or enabling Protected View in Office.