CVE-2017-11939: Infoleak

Published Dec 12, 2017

Updated

Microsoft Office 2016 Click-to-Run (C2R) allows an information disclosure vulnerability due to the way Microsoft Office enforces DRM copy/paste permissions, aka "Microsoft Office Information Disclosure Vulnerability".

Affected Software

1 affected component

Microsoft Office=2016-c2r

Remediation

Patch Available

https://portal.msrc.microsoft.com/en-US/security-guidance/advisory/CVE-2017-11939

Event History

Dec 12, 2017

CVE Published

via MITRE·09:00 PM

Data Sourced

via MITRE·09:00 PM

DescriptionWeakness

Frequently Asked Questions

What is the severity of CVE-2017-11939?

CVE-2017-11939 is classified as a critical information disclosure vulnerability.

How do I fix CVE-2017-11939?

To remediate CVE-2017-11939, ensure that your Microsoft Office 2016 Click-to-Run is updated to the latest version.

What types of software are affected by CVE-2017-11939?

CVE-2017-11939 specifically affects Microsoft Office 2016 Click-to-Run installations.

What is the nature of the issue described in CVE-2017-11939?

CVE-2017-11939 involves an information disclosure vulnerability related to DRM copy/paste permissions in Microsoft Office.

Can CVE-2017-11939 be exploited remotely?

Exploitation of CVE-2017-11939 typically requires user interaction, making it less likely to be exploited remotely without user action.