CVE-2017-8696: Buffer Overflow

Published Sep 13, 2017

Updated

Windows Uniscribe in Microsoft Windows Server 2008 SP2 and R2 SP1; Windows 7 SP1; Office 2007 SP3; Office 2010 SP2; Word Viewer; Office for Mac 2011 and 2016; Skype for Business 2016; Lync 2013 SP1; Lync 2010; Lync 2010 Attendee; and Live Meeting 2007 Add-in and Console allows an attacker to execute code remotely via a specially crafted website or a specially crafted document or email attachment, aka "Microsoft Graphics Component Remote Code Execution."

Affected Software

13 affected components

Microsoft Live Meeting=2007

Microsoft Lync=2010

Microsoft Lync=2013-sp1

Microsoft Office 2007=sp3

Microsoft Office 2010=sp2

Microsoft Office Web Apps=2010-sp2

Microsoft Office Word Viewer

Microsoft Skype for Business=2016

Microsoft Windows 7=sp1

Microsoft Windows Server 2008=sp2

Microsoft Windows Server 2008=r2-sp1

Remediation

Patch Available

https://portal.msrc.microsoft.com/en-US/security-guidance/advisory/CVE-2017-8696

Event History

Sep 13, 2017

CVE Published

via MITRE·01:00 AM

Data Sourced

via MITRE·01:00 AM

Description

Frequently Asked Questions

What is the severity of CVE-2017-8696?

CVE-2017-8696 has a critical severity rating, indicating a serious risk to affected systems.

How do I fix CVE-2017-8696?

To mitigate CVE-2017-8696, apply the latest security updates provided by Microsoft for all affected software.

Which systems are impacted by CVE-2017-8696?

CVE-2017-8696 affects various Microsoft products, including Windows Server, Office 2007 and 2010, Lync, and Skype for Business.

What type of vulnerability is CVE-2017-8696?

CVE-2017-8696 is a vulnerability in the Windows Uniscribe component that could allow remote code execution.

Is there a workaround for CVE-2017-8696?

Currently, no official workaround exists for CVE-2017-8696, so immediate patching is recommended.