CVE-2017-8571

Microsoft Office Security Feature Bypass Vulnerability

CVE-2017-8571 is fixed in 8 products on 1 platform, first by KB3213643, released July 27, 2017. It is not reported as exploited. Patch Radar priority: High.

High
CVSS
n/a
Important
Exploitation
None reported
Exploitation Less Likely
CISA KEV
Not listed
Not in the Known Exploited Vulnerabilities catalog
EPSS
0.0578
93rd percentile

<p>A security feature bypass vulnerability exists when Microsoft Office improperly handles input. An attacker who successfully exploited the vulnerability could execute arbitrary commands.</p> <p>In a file-sharing attack scenario, an attacker could provide a specially crafted document file designed to exploit the vulnerability, and then convince a user to open the document file and interact with the document by clicking a specific cell.</p> <p>The update addresses the vulnerability by correcting how Microsoft Office handles input.</p>

Where it's fixed

ProductFixed inFixReleased
Microsoft
Microsoft Outlook 2007 Service Pack 3 KB3213643 Jul 27, 2017
Microsoft Outlook 2010 Service Pack 2 (32-bit editions) KB2956078 Jul 27, 2017
Microsoft Outlook 2010 Service Pack 2 (64-bit editions) KB2956078 Jul 27, 2017
Microsoft Outlook 2013 RT Service Pack 1 KB4011078 Jul 27, 2017
Microsoft Outlook 2013 Service Pack 1 (32-bit editions) KB4011078 Jul 27, 2017
Microsoft Outlook 2013 Service Pack 1 (64-bit editions) KB4011078 Jul 27, 2017
Microsoft Outlook 2016 (32-bit edition) KB4011052 Jul 27, 2017
Microsoft Outlook 2016 (64-bit edition) KB4011052 Jul 27, 2017