CVE-2017-11877: Medium severity Microsoft Excel vulnerability
Microsoft Excel 2007 Service Pack 3, Microsoft Excel 2010 Service Pack 2, Microsoft Excel 2013 Service Pack 1, Microsoft Excel 2013 RT Service Pack 1, Microsoft Excel 2016, Microsoft Office Compatibility Pack Service Pack 3, Microsoft Excel Viewer 2007 Service Pack 3, and Microsoft Excel 2016 for Mac allow a security feature bypass by not enforcing macro settings on an Excel document, aka "Microsoft Excel Security Feature Bypass Vulnerability".
Affected Software
Remediation
Event History
Frequently Asked Questions
What is CVE-2017-11877?
CVE-2017-11877 is a vulnerability in Microsoft Excel that could allow remote code execution.
Which versions of Microsoft Excel are affected by CVE-2017-11877?
Microsoft Excel 2007, Microsoft Excel 2010, Microsoft Excel 2013, Microsoft Excel 2013 SP1, Microsoft Excel 2016, Microsoft Office Compatibility Pack, Microsoft Excel Viewer 2007, and Microsoft Excel 2016 for Mac are all affected by CVE-2017-11877.
What is the severity of CVE-2017-11877?
The severity of CVE-2017-11877 is medium with a severity score of 5.5.
How does CVE-2017-11877 work?
CVE-2017-11877 allows an attacker to execute arbitrary code by convincing a user to open a specially crafted Excel file.
Is there a patch available for CVE-2017-11877?
Yes, Microsoft has released patches to address CVE-2017-11877. Users should update their software to the latest version to mitigate the vulnerability.