Not rated
CVE-2017-11878 Microsoft Excel 2007 Service Pack 3, Microsoft Excel 2010 Service Pack 2, Microsoft Excel 2013 Service Pack 1, Microsoft…
Description
Microsoft Excel 2007 Service Pack 3, Microsoft Excel 2010 Service Pack 2, Microsoft Excel 2013 Service Pack 1, Microsoft Excel 2013 RT Service Pack 1, Microsoft Excel 2016, Microsoft Office Compatibility Pack Service Pack 3, and Microsoft Excel Viewer 2007 Service Pack 3 allow an attacker to run arbitrary code in the context of the current user by failing to properly handle objects in memory, aka "Microsoft Excel Memory Corruption Vulnerability".
Affected products and versions
| Product | Affected versions | Fixed in |
|---|---|---|
| Microsoft Office | Versions not published |
References
- 1039783 www.securitytracker.com
- portal.msrc.microsoft.com portal.msrc.microsoft.com
- 101756 www.securityfocus.com
Timeline
- Published
- Last modified
Other CVEs of Microsoft Office
The 45 CVEs of Microsoft Office →
CVE-2018-0922
Microsoft Office 2010 SP2, 2013 SP1, and 2016, Microsoft Office 2016 Click-to-Run Microsoft Office 2016 for Mac,…
Not rated
CVE-2018-0919
Microsoft Office 2010 SP2, 2013 SP1, and 2016, Microsoft Office 2016 Click-to-Run Microsoft Office 2016 for Mac,…
Not rated
CVE-2018-0852
Microsoft Outlook 2007 SP3, Microsoft Outlook 2010 SP2, Microsoft Outlook 2013 SP1 and RT SP1, Microsoft Outlook 2016,…
Not rated
CVE-2018-0841
Microsoft Office 2016 Click-to-Run allows a remote code execution vulnerability due to how objects are handled in…
Not rated