CVE-2017-0199

Microsoft Office 2007 SP3, Microsoft Office 2010 SP2, Microsoft Office 2013 SP1, Microsoft Office 2016, Microsoft Windows Vista SP2, Windows Server 2008 SP2, Windows 7 SP1, Windows 8.1 allow remote attackers to execute arbitrary code via a crafted document, aka "Microsoft Office/WordPad Remote Code Execution Vulnerability w/Windows API."

CVSS v3 7.8 HIGH
CVSS v2.0 9.3 HIGH

7.8^/10

CVSS v3 : HIGH

V3 Legend

Vector :

Exploitability : 1.8 / Impact : 5.9

Attack Vector LOCAL

Attack Complexity LOW

Privileges Required NONE

User Interaction REQUIRED

Confidentiality Impact HIGH

Integrity Impact HIGH

Availability Impact HIGH

Scope UNCHANGED

9.3^/10

CVSS v2.0 : HIGH

V2 Legend

Vector : AV:N/AC:M/Au:N/C:C/I:C/A:C

Exploitability : 8.6 / Impact : 10.0

Access Vector NETWORK

Access Complexity MEDIUM

Authentication NONE

Confidentiality Impact COMPLETE

Integrity Impact COMPLETE

Availability Impact COMPLETE

References

Link	Resource
http://rewtin.blogspot.nl/2017/04/cve-2017-0199-practical-exploitation-poc.html	Exploit Third Party Advisory
http://www.securityfocus.com/bid/97498	Broken Link Third Party Advisory VDB Entry
http://www.securitytracker.com/id/1038224	Broken Link Third Party Advisory VDB Entry
https://blog.nviso.be/2017/04/12/analysis-of-a-cve-2017-0199-malicious-rtf-document/	Exploit Third Party Advisory
https://ics-cert.us-cert.gov/advisories/ICSMA-18-058-02	Third Party Advisory US Government Resource
https://portal.msrc.microsoft.com/en-US/security-guidance/advisory/CVE-2017-0199	Patch Vendor Advisory
https://www.exploit-db.com/exploits/41894/	Exploit Third Party Advisory VDB Entry
https://www.exploit-db.com/exploits/41934/	Exploit Third Party Advisory VDB Entry
https://www.exploit-db.com/exploits/42995/	Third Party Advisory VDB Entry
https://www.fireeye.com/blog/threat-research/2017/04/cve-2017-0199_useda.html	Broken Link Exploit Third Party Advisory
https://www.mdsec.co.uk/2017/04/exploiting-cve-2017-0199-hta-handler-vulnerability/	Exploit Third Party Advisory
http://rewtin.blogspot.nl/2017/04/cve-2017-0199-practical-exploitation-poc.html	Exploit Third Party Advisory
http://www.securityfocus.com/bid/97498	Broken Link Third Party Advisory VDB Entry
http://www.securitytracker.com/id/1038224	Broken Link Third Party Advisory VDB Entry
https://blog.nviso.be/2017/04/12/analysis-of-a-cve-2017-0199-malicious-rtf-document/	Exploit Third Party Advisory
https://ics-cert.us-cert.gov/advisories/ICSMA-18-058-02	Third Party Advisory US Government Resource
https://portal.msrc.microsoft.com/en-US/security-guidance/advisory/CVE-2017-0199	Patch Vendor Advisory
https://www.exploit-db.com/exploits/41894/	Exploit Third Party Advisory VDB Entry
https://www.exploit-db.com/exploits/41934/	Exploit Third Party Advisory VDB Entry
https://www.exploit-db.com/exploits/42995/	Third Party Advisory VDB Entry
https://www.fireeye.com/blog/threat-research/2017/04/cve-2017-0199_useda.html	Broken Link Exploit Third Party Advisory
https://www.mdsec.co.uk/2017/04/exploiting-cve-2017-0199-hta-handler-vulnerability/	Exploit Third Party Advisory

Configurations

Configuration 1 (hide)

OR	cpe:2.3:a:microsoft:office:2007:sp3::::::
	cpe:2.3:a:microsoft:office:2010:sp2::::::
	cpe:2.3:a:microsoft:office:2013:sp1::::::
	cpe:2.3:a:microsoft:office:2016:-::::::
	cpe:2.3:o:microsoft:windows_7:-:sp1::::::
	cpe:2.3:o:microsoft:windows_server_2008:-:sp2::::::
	cpe:2.3:o:microsoft:windows_server_2008:r2:sp1::::::
	cpe:2.3:o:microsoft:windows_server_2012:-:::::::*
	cpe:2.3:o:microsoft:windows_vista:-:sp2::::::

Configuration 2 (hide)

OR	cpe:2.3:a:philips:intellispace_portal:7.0:::::::*
	cpe:2.3:a:philips:intellispace_portal:8.0:::::::*

History

21 Nov 2024, 03:02

Type	Values Removed	Values Added
References	~~() http://rewtin.blogspot.nl/2017/04/cve-2017-0199-practical-exploitation-poc.html - Exploit, Third Party Advisory~~	() http://rewtin.blogspot.nl/2017/04/cve-2017-0199-practical-exploitation-poc.html - Exploit, Third Party Advisory
References	~~() http://www.securityfocus.com/bid/97498 - Broken Link, Third Party Advisory, VDB Entry~~	() http://www.securityfocus.com/bid/97498 - Broken Link, Third Party Advisory, VDB Entry
References	~~() http://www.securitytracker.com/id/1038224 - Broken Link, Third Party Advisory, VDB Entry~~	() http://www.securitytracker.com/id/1038224 - Broken Link, Third Party Advisory, VDB Entry
References	~~() https://blog.nviso.be/2017/04/12/analysis-of-a-cve-2017-0199-malicious-rtf-document/ - Exploit, Third Party Advisory~~	() https://blog.nviso.be/2017/04/12/analysis-of-a-cve-2017-0199-malicious-rtf-document/ - Exploit, Third Party Advisory
References	~~() https://ics-cert.us-cert.gov/advisories/ICSMA-18-058-02 - Third Party Advisory, US Government Resource~~	() https://ics-cert.us-cert.gov/advisories/ICSMA-18-058-02 - Third Party Advisory, US Government Resource
References	~~() https://portal.msrc.microsoft.com/en-US/security-guidance/advisory/CVE-2017-0199 - Patch, Vendor Advisory~~	() https://portal.msrc.microsoft.com/en-US/security-guidance/advisory/CVE-2017-0199 - Patch, Vendor Advisory
References	~~() https://www.exploit-db.com/exploits/41894/ - Exploit, Third Party Advisory, VDB Entry~~	() https://www.exploit-db.com/exploits/41894/ - Exploit, Third Party Advisory, VDB Entry
References	~~() https://www.exploit-db.com/exploits/41934/ - Exploit, Third Party Advisory, VDB Entry~~	() https://www.exploit-db.com/exploits/41934/ - Exploit, Third Party Advisory, VDB Entry
References	~~() https://www.exploit-db.com/exploits/42995/ - Third Party Advisory, VDB Entry~~	() https://www.exploit-db.com/exploits/42995/ - Third Party Advisory, VDB Entry
References	~~() https://www.fireeye.com/blog/threat-research/2017/04/cve-2017-0199_useda.html - Broken Link, Exploit, Third Party Advisory~~	() https://www.fireeye.com/blog/threat-research/2017/04/cve-2017-0199_useda.html - Broken Link, Exploit, Third Party Advisory
References	~~() https://www.mdsec.co.uk/2017/04/exploiting-cve-2017-0199-hta-handler-vulnerability/ - Exploit, Third Party Advisory~~	() https://www.mdsec.co.uk/2017/04/exploiting-cve-2017-0199-hta-handler-vulnerability/ - Exploit, Third Party Advisory

24 Jul 2024, 17:11

Type	Values Removed	Values Added
First Time		Philips intellispace Portal Philips
CPE	cpe:2.3:o:microsoft:windows_7::sp1::::::* cpe:2.3:o:microsoft:windows_vista::sp2::::::* cpe:2.3:a:microsoft:office:2016:::::::* cpe:2.3:o:microsoft:windows_server_2008::sp2::::::*	cpe:2.3:o:microsoft:windows_vista:-:sp2:::::: cpe:2.3:a:philips:intellispace_portal:8.0:::::::* cpe:2.3:a:microsoft:office:2016:-:::::: cpe:2.3:o:microsoft:windows_7:-:sp1:::::: cpe:2.3:a:philips:intellispace_portal:7.0:::::::* cpe:2.3:o:microsoft:windows_server_2008:-:sp2::::::
References	~~() http://www.securityfocus.com/bid/97498 - Third Party Advisory, VDB Entry~~	() http://www.securityfocus.com/bid/97498 - Broken Link, Third Party Advisory, VDB Entry
References	~~() http://www.securitytracker.com/id/1038224 -~~	() http://www.securitytracker.com/id/1038224 - Broken Link, Third Party Advisory, VDB Entry
References	~~() https://ics-cert.us-cert.gov/advisories/ICSMA-18-058-02 -~~	() https://ics-cert.us-cert.gov/advisories/ICSMA-18-058-02 - Third Party Advisory, US Government Resource
References	~~() https://www.exploit-db.com/exploits/41894/ -~~	() https://www.exploit-db.com/exploits/41894/ - Exploit, Third Party Advisory, VDB Entry
References	~~() https://www.exploit-db.com/exploits/41934/ -~~	() https://www.exploit-db.com/exploits/41934/ - Exploit, Third Party Advisory, VDB Entry
References	~~() https://www.exploit-db.com/exploits/42995/ -~~	() https://www.exploit-db.com/exploits/42995/ - Third Party Advisory, VDB Entry
References	~~() https://www.fireeye.com/blog/threat-research/2017/04/cve-2017-0199_useda.html - Exploit, Third Party Advisory~~	() https://www.fireeye.com/blog/threat-research/2017/04/cve-2017-0199_useda.html - Broken Link, Exploit, Third Party Advisory

Information

Published : 2017-04-12 14:59

Updated : 2024-11-21 03:02

NVD link : CVE-2017-0199

Mitre link : CVE-2017-0199

CVE.ORG link : CVE-2017-0199

JSON object : View

Products Affected

microsoft

windows_vista
windows_7
windows_server_2012
windows_server_2008
office

philips

intellispace_portal

CWE

NVD-CWE-noinfo

7.8 /10