CVE-2017-8744: Buffer Overflow

Published Sep 13, 2017

Updated

A remote code execution vulnerability exists in Excel Services, Microsoft Excel 2007 Service Pack 3, Microsoft Excel 2010 Service Pack 2, Microsoft Excel 2013 Service Pack 1, Microsoft Excel 2013 RT Service Pack 1, and Microsoft Excel 2016 when they fail to properly handle objects in memory, aka "Microsoft Office Memory Corruption Vulnerability". This CVE ID is unique from CVE-2017-8630, CVE-2017-8632, and CVE-2017-8731.

Affected Software

4 affected components

Microsoft Office=2007-sp3

Microsoft Office=2010-sp2

Microsoft Office=2013-sp1

Microsoft Office=2016

Remediation

Patch Available

https://portal.msrc.microsoft.com/en-US/security-guidance/advisory/CVE-2017-8744

Event History

Sep 13, 2017

CVE Published

via MITRE·01:00 AM

Data Sourced

via MITRE·01:00 AM

DescriptionWeakness

Frequently Asked Questions

What is the severity of CVE-2017-8744?

CVE-2017-8744 has a CVSS score indicating it as a critical remote code execution vulnerability.

How do I fix CVE-2017-8744?

To fix CVE-2017-8744, ensure that you have installed the latest security updates provided by Microsoft for the affected versions of Excel.

What software is affected by CVE-2017-8744?

CVE-2017-8744 affects multiple versions of Microsoft Excel, including 2007, 2010, 2013, and 2016.

What type of vulnerability is CVE-2017-8744?

CVE-2017-8744 is classified as a remote code execution vulnerability due to improper memory handling.

Can CVE-2017-8744 be exploited remotely?

Yes, CVE-2017-8744 can be exploited remotely, allowing attackers to execute arbitrary code on affected systems.