CVE-2017-11934: Infoleak
First published: Tue Dec 12 2017(Updated: )
Microsoft Office 2013 RT SP1, Microsoft Office 2013 SP1, and Microsoft Office 2016 allow an information disclosure vulnerability due to the way certain functions handle objects in memory, aka "Microsoft Office Information Disclosure Vulnerability".
Credit: secure@microsoft.com
| Affected Software | Affected Version | How to fix |
|---|---|---|
| Microsoft Office | =2013-sp1 | |
| Microsoft Office | =2016 | |
| Microsoft Office for Mac OS X | =2016 | |
| Microsoft Office | =2016-c2r |
Never miss a vulnerability like this again
Sign up to SecAlerts for real-time vulnerability data matched to your software, aggregated from hundreds of sources.
Reference Links
Frequently Asked Questions
What is the severity of CVE-2017-11934?
CVE-2017-11934 has a severity rating that indicates it allows for potential information disclosure.
How do I fix CVE-2017-11934?
To fix CVE-2017-11934, it is recommended to apply the latest security updates from Microsoft for affected versions of Office.
Which versions of Microsoft Office are affected by CVE-2017-11934?
CVE-2017-11934 affects Microsoft Office 2013 SP1 and Microsoft Office 2016.
What kind of vulnerability is CVE-2017-11934?
CVE-2017-11934 is classified as an information disclosure vulnerability due to improper handling of objects in memory.
Can CVE-2017-11934 be exploited remotely?
CVE-2017-11934 requires local access to the system, meaning it cannot be exploited remotely without prior access.
- agent/type
- agent/softwarecombine
- collector/mitre-cve
- source/MITRE
- agent/remedy
- agent/last-modified-date
- agent/references
- agent/weakness
- agent/severity
- agent/author
- agent/description
- agent/event
- agent/first-publish-date
- agent/source
- agent/tags
- collector/nvd-index
- agent/software-canonical-lookup-request
- vendor/microsoft
- canonical/microsoft office
- version/microsoft office/2013-sp1
- version/microsoft office/2016
- canonical/microsoft office for mac os x
- version/microsoft office for mac os x/2016
- version/microsoft office/2016-c2r