CVE-2017-8743: Buffer Overflow
First published: Wed Sep 13 2017(Updated: )
A remote code execution vulnerability exists in Microsoft PowerPoint 2016, Microsoft SharePoint Enterprise Server 2016, and Office Online Server when they fail to properly handle objects in memory, aka "PowerPoint Remote Code Execution Vulnerability". This CVE ID is unique from CVE-2017-8742.
Credit: secure@microsoft.com
| Affected Software | Affected Version | How to fix |
|---|---|---|
| Microsoft Office Online Server | ||
| Microsoft PowerPoint 2010 | =2016 | |
| Microsoft SharePoint Server 2010 | =2016 |
Never miss a vulnerability like this again
Sign up to SecAlerts for real-time vulnerability data matched to your software, aggregated from hundreds of sources.
Reference Links
Frequently Asked Questions
What is the severity of CVE-2017-8743?
CVE-2017-8743 has a critical severity rating due to its potential for remote code execution.
How do I fix CVE-2017-8743?
To fix CVE-2017-8743, apply the latest security updates released by Microsoft for PowerPoint 2016, SharePoint Enterprise Server 2016, or Office Online Server.
What software is affected by CVE-2017-8743?
CVE-2017-8743 affects Microsoft PowerPoint 2016, Microsoft SharePoint Enterprise Server 2016, and Office Online Server.
Can CVE-2017-8743 be exploited remotely?
Yes, CVE-2017-8743 can be exploited remotely if a user opens a specially crafted PowerPoint file.
What are the potential impacts of CVE-2017-8743?
The potential impacts of CVE-2017-8743 include unauthorized access to system resources and execution of arbitrary code.
- agent/type
- agent/softwarecombine
- agent/weakness
- agent/author
- agent/severity
- agent/references
- agent/remedy
- agent/description
- collector/mitre-cve
- source/MITRE
- agent/last-modified-date
- agent/first-publish-date
- agent/event
- agent/source
- agent/tags
- collector/nvd-index
- agent/software-canonical-lookup-request
- vendor/microsoft
- canonical/microsoft office online server
- canonical/microsoft powerpoint 2010
- version/microsoft powerpoint 2010/2016
- canonical/microsoft sharepoint server 2010
- version/microsoft sharepoint server 2010/2016