CVE-2017-11877
First published: Wed Nov 15 2017(Updated: )
Microsoft Excel 2007 Service Pack 3, Microsoft Excel 2010 Service Pack 2, Microsoft Excel 2013 Service Pack 1, Microsoft Excel 2013 RT Service Pack 1, Microsoft Excel 2016, Microsoft Office Compatibility Pack Service Pack 3, Microsoft Excel Viewer 2007 Service Pack 3, and Microsoft Excel 2016 for Mac allow a security feature bypass by not enforcing macro settings on an Excel document, aka "Microsoft Excel Security Feature Bypass Vulnerability".
Credit: secure@microsoft.com secure@microsoft.com
| Affected Software | Affected Version | How to fix |
|---|---|---|
| Microsoft Excel | =2007 | |
| Microsoft Excel | =2010 | |
| Microsoft Excel | =2013 | |
| Microsoft Excel | =2013-sp1 | |
| Microsoft Excel | =2016 | |
| Microsoft Excel Mac Os X | =2016 | |
| Microsoft Excel Viewer | =2007-sp3 | |
| Microsoft Office Compatibility Pack | =sp3 |
Never miss a vulnerability like this again
Sign up to SecAlerts for real-time vulnerability data matched to your software, aggregated from hundreds of sources.
Reference Links
Frequently Asked Questions
What is CVE-2017-11877?
CVE-2017-11877 is a vulnerability in Microsoft Excel that could allow remote code execution.
Which versions of Microsoft Excel are affected by CVE-2017-11877?
Microsoft Excel 2007, Microsoft Excel 2010, Microsoft Excel 2013, Microsoft Excel 2013 SP1, Microsoft Excel 2016, Microsoft Office Compatibility Pack, Microsoft Excel Viewer 2007, and Microsoft Excel 2016 for Mac are all affected by CVE-2017-11877.
What is the severity of CVE-2017-11877?
The severity of CVE-2017-11877 is medium with a severity score of 5.5.
How does CVE-2017-11877 work?
CVE-2017-11877 allows an attacker to execute arbitrary code by convincing a user to open a specially crafted Excel file.
Is there a patch available for CVE-2017-11877?
Yes, Microsoft has released patches to address CVE-2017-11877. Users should update their software to the latest version to mitigate the vulnerability.
- agent/severity
- agent/references
- agent/author
- agent/type
- agent/event
- agent/description
- agent/softwarecombine
- agent/first-publish-date
- agent/remedy
- agent/last-modified-date
- agent/tags
- collector/nvd-index
- agent/software-canonical-lookup-request
- collector/nvd-api
- vendor/microsoft
- canonical/microsoft excel
- version/microsoft excel/2007
- version/microsoft excel/2010
- version/microsoft excel/2013
- version/microsoft excel/2013-sp1
- version/microsoft excel/2016
- canonical/microsoft excel mac os x
- version/microsoft excel mac os x/2016
- canonical/microsoft excel viewer
- version/microsoft excel viewer/2007-sp3
- canonical/microsoft office compatibility pack
- version/microsoft office compatibility pack/sp3