CVE-2017-11878: Buffer Overflow
First published: Wed Nov 15 2017(Updated: )
Microsoft Excel 2007 Service Pack 3, Microsoft Excel 2010 Service Pack 2, Microsoft Excel 2013 Service Pack 1, Microsoft Excel 2013 RT Service Pack 1, Microsoft Excel 2016, Microsoft Office Compatibility Pack Service Pack 3, and Microsoft Excel Viewer 2007 Service Pack 3 allow an attacker to run arbitrary code in the context of the current user by failing to properly handle objects in memory, aka "Microsoft Excel Memory Corruption Vulnerability".
Credit: secure@microsoft.com secure@microsoft.com
| Affected Software | Affected Version | How to fix |
|---|---|---|
| Microsoft Excel | =2007 | |
| Microsoft Excel | =2010 | |
| Microsoft Excel | =2013 | |
| Microsoft Excel | =2013-sp1 | |
| Microsoft Excel | =2016 | |
| Microsoft Excel Viewer | =2007-sp3 | |
| Microsoft Office Compatibility Pack | =sp3 |
Never miss a vulnerability like this again
Sign up to SecAlerts for real-time vulnerability data matched to your software, aggregated from hundreds of sources.
Reference Links
Frequently Asked Questions
What is CVE-2017-11878?
CVE-2017-11878 is a vulnerability found in Microsoft Excel 2007, 2010, 2013, 2016, Excel Viewer 2007, and Office Compatibility Pack that allows an attacker to run arbitrary code.
How severe is CVE-2017-11878?
CVE-2017-11878 is considered critical with a severity score of 7.8.
Which versions of Microsoft Excel are affected by CVE-2017-11878?
Microsoft Excel 2007, 2010, 2013, and 2016 are affected by CVE-2017-11878.
How can I fix CVE-2017-11878?
To fix CVE-2017-11878, it is recommended to install the latest security updates provided by Microsoft.
Where can I find more information about CVE-2017-11878?
More information about CVE-2017-11878 can be found on the following websites: [SecurityFocus](http://www.securityfocus.com/bid/101756), [SecurityTracker](http://www.securitytracker.com/id/1039783), and [Microsoft Security Guidance Advisory](https://portal.msrc.microsoft.com/en-US/security-guidance/advisory/CVE-2017-11878).
- agent/author
- agent/type
- agent/first-publish-date
- agent/softwarecombine
- agent/last-modified-date
- collector/nvd-index
- agent/software-canonical-lookup-request
- collector/nvd-api
- agent/weakness
- agent/severity
- agent/references
- agent/remedy
- agent/tags
- agent/description
- agent/event
- collector/mitre-cve
- source/MITRE
- vendor/microsoft
- canonical/microsoft excel
- version/microsoft excel/2007
- version/microsoft excel/2010
- version/microsoft excel/2013
- version/microsoft excel/2013-sp1
- version/microsoft excel/2016
- canonical/microsoft excel viewer
- version/microsoft excel viewer/2007-sp3
- canonical/microsoft office compatibility pack
- version/microsoft office compatibility pack/sp3