CVE-2017-11825: Buffer Overflow
Microsoft Office 2016 Click-to-Run (C2R) and Microsoft Office 2016 for Mac allow an attacker to use a specially crafted file to perform actions in the security context of the current user, due to how Microsoft Office handles files in memory, aka "Microsoft Office Remote Code Execution Vulnerability".
Affected Software
Remediation
Event History
Frequently Asked Questions
What is the severity of CVE-2017-11825?
CVE-2017-11825 is rated as critical due to its potential for remote code execution.
How do I fix CVE-2017-11825?
To fix CVE-2017-11825, ensure that you apply the latest security updates for Microsoft Office 2016.
What are the potential consequences of CVE-2017-11825?
Exploiting CVE-2017-11825 could allow an attacker to execute arbitrary code in the context of the logged-in user.
Which versions of Microsoft software are affected by CVE-2017-11825?
CVE-2017-11825 affects Microsoft Office 2016 Click-to-Run and Microsoft Office 2016 for Mac.
Is there evidence of active exploitation of CVE-2017-11825?
Yes, there have been indications of active exploitation of CVE-2017-11825 in the wild.