CVE-2017-0292: Critical severity microsoft office word vulnerability

Published Jun 15, 2017

Updated

Windows PDF in Windows 8.1, Windows Server 2012 Gold and R2, Windows RT 8.1, Windows 10 Gold, 1511, 1607, 1703, and Windows Server 2016 allows remote code execution if a user opens a specially crafted PDF file, aka "Windows PDF Remote Code Execution Vulnerability". This CVE ID is unique from CVE-2017-0291.

Affected Software

12 affected components

Microsoft word=2013-sp1

Microsoft word=2016

Microsoft Windows 10

Microsoft Windows 10=1511

Microsoft Windows 10=1607

Microsoft Windows 10=1703

Microsoft Windows 8.1

Microsoft Windows RT 8.1

Microsoft Windows Server 2012

Microsoft Windows Server 2012=r2

Microsoft Windows Server 2016

Remediation

Patch Available

https://portal.msrc.microsoft.com/en-US/security-guidance/advisory/CVE-2017-0292

Event History

Jun 15, 2017

CVE Published

via MITRE·01:00 AM

Data Sourced

via MITRE·01:00 AM

DescriptionWeakness

Frequently Asked Questions

What is the severity of CVE-2017-0292?

CVE-2017-0292 has a critical severity rating due to its potential for remote code execution.

How do I fix CVE-2017-0292?

To fix CVE-2017-0292, ensure that all affected Microsoft products are updated with the latest security patches provided by Microsoft.

What products are affected by CVE-2017-0292?

CVE-2017-0292 affects various versions of Microsoft Windows, including Windows 8.1, Windows 10, and Windows Server 2016, as well as specific editions of Microsoft Word.

How can CVE-2017-0292 be exploited?

CVE-2017-0292 can be exploited if a user opens a specially crafted PDF file, leading to potential remote code execution.

Is there a workaround for CVE-2017-0292?

While the best solution is to apply the security updates, temporarily avoiding opening untrusted PDF files can mitigate the risk of CVE-2017-0292.