{
  "cveId": "CVE-2017-0199",
  "url": "https://patchblox.com/security/cve/CVE-2017-0199",
  "summary": "CVE-2017-0199 is fixed in 21 products on 1 platform, first by KB4015549, released April 11, 2017. It is being exploited: CISA added it to the Known Exploited Vulnerabilities catalog on November 3, 2021, with known ransomware use. Patch Radar priority: Patch now.",
  "title": "Microsoft Office/WordPad Remote Code Execution Vulnerability w/Windows",
  "description": "\u003Cp\u003EA remote code execution vulnerability exists in the way that Microsoft Office and WordPad parse specially crafted files. An attacker who successfully exploited this vulnerability could take control of an affected system. An attacker could then install programs; view, change, or delete data; or create new accounts with full user rights.\u003C/p\u003E\n\u003Cp\u003EExploitation of this vulnerability requires that a user open or preview a specially crafted file with an affected version of Microsoft Office or WordPad. In an email attack scenario, an attacker could exploit the vulnerability by sending a specially crafted file to the user and then convincing the user to open the file.\u003C/p\u003E\n\u003Cp\u003EThe update addresses the vulnerability by correcting the way that Microsoft Office and WordPad parses specially crafted files, and by enabling API functionality in Windows that Microsoft Office and WordPad will leverage to resolve the identified issue.\u003C/p\u003E",
  "published": "2017-04-21T07:00:00Z",
  "severity": "Critical",
  "cvss": 6.7,
  "epss": 0.99497,
  "epssPercentile": 0.99944,
  "priority": "Patch now",
  "priorityTier": 1,
  "exploited": true,
  "vendorExploited": false,
  "disclosed": false,
  "exploitabilityAssessment": "Exploitation Less Likely",
  "kev": {
    "added": "2021-11-03T00:00:00Z",
    "due": "2022-05-03T00:00:00Z",
    "ransomware": true,
    "requiredAction": "Apply updates per vendor instructions."
  },
  "vendorAdvisory": "https://msrc.microsoft.com/update-guide/vulnerability/CVE-2017-0199",
  "fixes": [
    {
      "platform": "microsoft",
      "product": "Microsoft Office 2007 Service Pack 3",
      "fixedVersion": "",
      "fix": "KB3141529",
      "url": "https://patchblox.com/security/fix/microsoft/kb3141529",
      "released": "2017-04-21T07:00:00Z"
    },
    {
      "platform": "microsoft",
      "product": "Microsoft Office 2010 Service Pack 2 (32-bit editions)",
      "fixedVersion": "",
      "fix": "KB3141538",
      "url": "https://patchblox.com/security/fix/microsoft/kb3141538",
      "released": "2017-04-21T07:00:00Z"
    },
    {
      "platform": "microsoft",
      "product": "Microsoft Office 2010 Service Pack 2 (64-bit editions)",
      "fixedVersion": "",
      "fix": "KB3141538",
      "url": "https://patchblox.com/security/fix/microsoft/kb3141538",
      "released": "2017-04-21T07:00:00Z"
    },
    {
      "platform": "microsoft",
      "product": "Microsoft Office 2013 Service Pack 1 (32-bit editions)",
      "fixedVersion": "",
      "fix": "KB3178710",
      "url": "https://patchblox.com/security/fix/microsoft/kb3178710",
      "released": "2017-04-21T07:00:00Z"
    },
    {
      "platform": "microsoft",
      "product": "Microsoft Office 2013 Service Pack 1 (64-bit editions)",
      "fixedVersion": "",
      "fix": "KB3178710",
      "url": "https://patchblox.com/security/fix/microsoft/kb3178710",
      "released": "2017-04-21T07:00:00Z"
    },
    {
      "platform": "microsoft",
      "product": "Microsoft Office 2016 (32-bit edition)",
      "fixedVersion": "",
      "fix": "KB3178703",
      "url": "https://patchblox.com/security/fix/microsoft/kb3178703",
      "released": "2017-04-21T07:00:00Z"
    },
    {
      "platform": "microsoft",
      "product": "Microsoft Office 2016 (64-bit edition)",
      "fixedVersion": "",
      "fix": "KB3178703",
      "url": "https://patchblox.com/security/fix/microsoft/kb3178703",
      "released": "2017-04-21T07:00:00Z"
    },
    {
      "platform": "microsoft",
      "product": "Windows 7 for 32-bit Systems Service Pack 1",
      "fixedVersion": "",
      "fix": "KB4015549",
      "url": "https://patchblox.com/security/fix/microsoft/kb4015549",
      "released": "2017-04-11T07:00:00Z"
    },
    {
      "platform": "microsoft",
      "product": "Windows 7 for 32-bit Systems Service Pack 1",
      "fixedVersion": "",
      "fix": "KB4015546",
      "url": "https://patchblox.com/security/fix/microsoft/kb4015546",
      "released": "2017-04-11T07:00:00Z"
    },
    {
      "platform": "microsoft",
      "product": "Windows 7 for x64-based Systems Service Pack 1",
      "fixedVersion": "",
      "fix": "KB4015549",
      "url": "https://patchblox.com/security/fix/microsoft/kb4015549",
      "released": "2017-04-11T07:00:00Z"
    },
    {
      "platform": "microsoft",
      "product": "Windows 7 for x64-based Systems Service Pack 1",
      "fixedVersion": "",
      "fix": "KB4015546",
      "url": "https://patchblox.com/security/fix/microsoft/kb4015546",
      "released": "2017-04-11T07:00:00Z"
    },
    {
      "platform": "microsoft",
      "product": "Windows Server 2008 R2 for Itanium-Based Systems Service Pack 1",
      "fixedVersion": "",
      "fix": "KB4015549",
      "url": "https://patchblox.com/security/fix/microsoft/kb4015549",
      "released": "2017-04-11T07:00:00Z"
    },
    {
      "platform": "microsoft",
      "product": "Windows Server 2008 R2 for Itanium-Based Systems Service Pack 1",
      "fixedVersion": "",
      "fix": "KB4015546",
      "url": "https://patchblox.com/security/fix/microsoft/kb4015546",
      "released": "2017-04-11T07:00:00Z"
    },
    {
      "platform": "microsoft",
      "product": "Windows Server 2008 R2 for x64-based Systems Service Pack 1",
      "fixedVersion": "",
      "fix": "KB4015549",
      "url": "https://patchblox.com/security/fix/microsoft/kb4015549",
      "released": "2017-04-11T07:00:00Z"
    },
    {
      "platform": "microsoft",
      "product": "Windows Server 2008 R2 for x64-based Systems Service Pack 1",
      "fixedVersion": "",
      "fix": "KB4015546",
      "url": "https://patchblox.com/security/fix/microsoft/kb4015546",
      "released": "2017-04-11T07:00:00Z"
    },
    {
      "platform": "microsoft",
      "product": "Windows Server 2008 R2 for x64-based Systems Service Pack 1 (Server Core installation)",
      "fixedVersion": "",
      "fix": "KB4015549",
      "url": "https://patchblox.com/security/fix/microsoft/kb4015549",
      "released": "2017-04-11T07:00:00Z"
    },
    {
      "platform": "microsoft",
      "product": "Windows Server 2008 R2 for x64-based Systems Service Pack 1 (Server Core installation)",
      "fixedVersion": "",
      "fix": "KB4015546",
      "url": "https://patchblox.com/security/fix/microsoft/kb4015546",
      "released": "2017-04-11T07:00:00Z"
    },
    {
      "platform": "microsoft",
      "product": "Windows Server 2008 for 32-bit Systems Service Pack 2",
      "fixedVersion": "",
      "fix": "KB4014793",
      "url": "https://patchblox.com/security/fix/microsoft/kb4014793",
      "released": "2017-04-21T07:00:00Z"
    },
    {
      "platform": "microsoft",
      "product": "Windows Server 2008 for 32-bit Systems Service Pack 2 (Server Core installation)",
      "fixedVersion": "",
      "fix": "KB4014793",
      "url": "https://patchblox.com/security/fix/microsoft/kb4014793",
      "released": "2017-04-21T07:00:00Z"
    },
    {
      "platform": "microsoft",
      "product": "Windows Server 2008 for Itanium-Based Systems Service Pack 2",
      "fixedVersion": "",
      "fix": "KB4014793",
      "url": "https://patchblox.com/security/fix/microsoft/kb4014793",
      "released": "2017-04-21T07:00:00Z"
    },
    {
      "platform": "microsoft",
      "product": "Windows Server 2008 for x64-based Systems Service Pack 2",
      "fixedVersion": "",
      "fix": "KB4014793",
      "url": "https://patchblox.com/security/fix/microsoft/kb4014793",
      "released": "2017-04-21T07:00:00Z"
    },
    {
      "platform": "microsoft",
      "product": "Windows Server 2008 for x64-based Systems Service Pack 2 (Server Core installation)",
      "fixedVersion": "",
      "fix": "KB4014793",
      "url": "https://patchblox.com/security/fix/microsoft/kb4014793",
      "released": "2017-04-21T07:00:00Z"
    },
    {
      "platform": "microsoft",
      "product": "Windows Server 2012",
      "fixedVersion": "",
      "fix": "KB4015551",
      "url": "https://patchblox.com/security/fix/microsoft/kb4015551",
      "released": "2017-04-11T07:00:00Z"
    },
    {
      "platform": "microsoft",
      "product": "Windows Server 2012",
      "fixedVersion": "",
      "fix": "KB4015548",
      "url": "https://patchblox.com/security/fix/microsoft/kb4015548",
      "released": "2017-04-11T07:00:00Z"
    },
    {
      "platform": "microsoft",
      "product": "Windows Server 2012 (Server Core installation)",
      "fixedVersion": "",
      "fix": "KB4015551",
      "url": "https://patchblox.com/security/fix/microsoft/kb4015551",
      "released": "2017-04-11T07:00:00Z"
    },
    {
      "platform": "microsoft",
      "product": "Windows Server 2012 (Server Core installation)",
      "fixedVersion": "",
      "fix": "KB4015548",
      "url": "https://patchblox.com/security/fix/microsoft/kb4015548",
      "released": "2017-04-11T07:00:00Z"
    },
    {
      "platform": "microsoft",
      "product": "Windows Vista Service Pack 2",
      "fixedVersion": "",
      "fix": "KB4014793",
      "url": "https://patchblox.com/security/fix/microsoft/kb4014793",
      "released": "2017-04-21T07:00:00Z"
    },
    {
      "platform": "microsoft",
      "product": "Windows Vista x64 Edition Service Pack 2",
      "fixedVersion": "",
      "fix": "KB4014793",
      "url": "https://patchblox.com/security/fix/microsoft/kb4014793",
      "released": "2017-04-21T07:00:00Z"
    }
  ],
  "noFixYet": [],
  "dataAsOf": "2026-11-07T06:34:28Z"
}