Product:
Microsoft Office
Summary
Microsoft Office allows a remote code execution vulnerability due to the way that it handles objects in memory. This vulnerability can lead to complete compromise of the affected system, allowing attackers to execute arbitrary code remotely. It is important to note that this CVE ID is unique from CVE-2017-0243.
Details
| Severity | Base Score | CVE |
|---|---|---|
| HIGH | 7.8 | CVE-2017-8570 |
Exploitation
To exploit this vulnerability, an attacker can craft a malicious file that, when opened by a user, triggers the execution of arbitrary code. This typically requires user interaction, as the user must open the malicious file. Once executed, the attacker can gain control over the affected system, leading to potential data theft or further exploitation.
Affected Products
- Microsoft Office: Vulnerable to remote code execution due to improper handling of objects in memory.
Mitigation
To mitigate this vulnerability, users should apply updates as per the vendor’s instructions. Regularly updating software can help protect against known vulnerabilities and reduce the risk of exploitation.