CVE-2017-8571
Microsoft Office Security Feature Bypass Vulnerability
CVE-2017-8571 is fixed in 8 products on 1 platform, first by KB3213643, released July 27, 2017. It is not reported as exploited. Patch Radar priority: High.
High
CVSS
n/a
Important
Exploitation
None reported
Exploitation Less Likely
CISA KEV
Not listed
Not in the Known Exploited Vulnerabilities catalog
EPSS
0.0578
93rd percentile
<p>A security feature bypass vulnerability exists when Microsoft Office improperly handles input. An attacker who successfully exploited the vulnerability could execute arbitrary commands.</p> <p>In a file-sharing attack scenario, an attacker could provide a specially crafted document file designed to exploit the vulnerability, and then convince a user to open the document file and interact with the document by clicking a specific cell.</p> <p>The update addresses the vulnerability by correcting how Microsoft Office handles input.</p>
Where it's fixed
| Product | Fixed in | Fix | Released |
|---|---|---|---|
| Microsoft | |||
| Microsoft Outlook 2007 Service Pack 3 | KB3213643 | Jul 27, 2017 | |
| Microsoft Outlook 2010 Service Pack 2 (32-bit editions) | KB2956078 | Jul 27, 2017 | |
| Microsoft Outlook 2010 Service Pack 2 (64-bit editions) | KB2956078 | Jul 27, 2017 | |
| Microsoft Outlook 2013 RT Service Pack 1 | KB4011078 | Jul 27, 2017 | |
| Microsoft Outlook 2013 Service Pack 1 (32-bit editions) | KB4011078 | Jul 27, 2017 | |
| Microsoft Outlook 2013 Service Pack 1 (64-bit editions) | KB4011078 | Jul 27, 2017 | |
| Microsoft Outlook 2016 (32-bit edition) | KB4011052 | Jul 27, 2017 | |
| Microsoft Outlook 2016 (64-bit edition) | KB4011052 | Jul 27, 2017 | |