CVE-2017-11934: Infoleak

Published Dec 12, 2017

Updated

Microsoft Office 2013 RT SP1, Microsoft Office 2013 SP1, and Microsoft Office 2016 allow an information disclosure vulnerability due to the way certain functions handle objects in memory, aka "Microsoft Office Information Disclosure Vulnerability".

Affected Software

4 affected components

Microsoft Office=2013-sp1

Microsoft Office=2016

Microsoft Office Mac Os X=2016

Microsoft Office=2016-c2r

Remediation

Patch Available

https://portal.msrc.microsoft.com/en-US/security-guidance/advisory/CVE-2017-11934

Event History

Dec 12, 2017

CVE Published

via MITRE·09:00 PM

Data Sourced

via MITRE·09:00 PM

DescriptionWeakness

Frequently Asked Questions

What is the severity of CVE-2017-11934?

CVE-2017-11934 has a severity rating that indicates it allows for potential information disclosure.

How do I fix CVE-2017-11934?

To fix CVE-2017-11934, it is recommended to apply the latest security updates from Microsoft for affected versions of Office.

Which versions of Microsoft Office are affected by CVE-2017-11934?

CVE-2017-11934 affects Microsoft Office 2013 SP1 and Microsoft Office 2016.

What kind of vulnerability is CVE-2017-11934?

CVE-2017-11934 is classified as an information disclosure vulnerability due to improper handling of objects in memory.

Can CVE-2017-11934 be exploited remotely?

CVE-2017-11934 requires local access to the system, meaning it cannot be exploited remotely without prior access.