2 lines
8.5 KiB
JSON
2 lines
8.5 KiB
JSON
{"affected":[{"affectedData":[{"product":"Office/WordPad","vendor":"Microsoft Corporation","versions":[{"status":"affected","version":"Office 2007 SP3, Microsoft Office 2010 SP2, Microsoft Office 2013 SP1, Microsoft Office 2016, Microsoft Windows Vista SP2, Windows Server 2008 SP2, Windows 7 SP1, and Windows 8.1"}]}],"source":"secure@microsoft.com"}],"cisaActionDue":"2022-05-03","cisaExploitAdd":"2021-11-03","cisaRequiredAction":"Apply updates per vendor instructions.","cisaVulnerabilityName":"Microsoft Office and WordPad Remote Code Execution Vulnerability","configurations":[{"nodes":[{"cpeMatch":[{"criteria":"cpe:2.3:a:microsoft:office:2007:sp3:*:*:*:*:*:*","matchCriteriaId":"FEECD12A-5BEF-4675-B62E-86CF4A7474D7","vulnerable":true},{"criteria":"cpe:2.3:a:microsoft:office:2010:sp2:*:*:*:*:*:*","matchCriteriaId":"081DE1E3-4622-4C32-8B9C-9AEC1CD20638","vulnerable":true},{"criteria":"cpe:2.3:a:microsoft:office:2013:sp1:*:*:*:*:*:*","matchCriteriaId":"120690A6-E0A1-4E36-A35A-C87109ECC064","vulnerable":true},{"criteria":"cpe:2.3:a:microsoft:office:2016:-:*:*:*:*:*:*","matchCriteriaId":"E2F740BB-49FA-48E0-BBBA-7685C0DA09BF","vulnerable":true},{"criteria":"cpe:2.3:o:microsoft:windows_7:-:sp1:*:*:*:*:*:*","matchCriteriaId":"C2B1C231-DE19-4B8F-A4AA-5B3A65276E46","vulnerable":true},{"criteria":"cpe:2.3:o:microsoft:windows_server_2008:-:sp2:*:*:*:*:*:*","matchCriteriaId":"5F422A8C-2C4E-42C8-B420-E0728037E15C","vulnerable":true},{"criteria":"cpe:2.3:o:microsoft:windows_server_2008:r2:sp1:*:*:*:*:*:*","matchCriteriaId":"2ACA9287-B475-4AF7-A4DA-A7143CEF9E57","vulnerable":true},{"criteria":"cpe:2.3:o:microsoft:windows_server_2012:-:*:*:*:*:*:*:*","matchCriteriaId":"A7DF96F8-BA6A-4780-9CA3-F719B3F81074","vulnerable":true},{"criteria":"cpe:2.3:o:microsoft:windows_vista:-:sp2:*:*:*:*:*:*","matchCriteriaId":"BF1AD1A1-EE20-4BCE-9EE6-84B27139811C","vulnerable":true}],"negate":false,"operator":"OR"}]},{"nodes":[{"cpeMatch":[{"criteria":"cpe:2.3:a:philips:intellispace_portal:7.0:*:*:*:*:*:*:*","matchCriteriaId":"184A3E7A-9716-4594-9293-4ED708EF938F","vulnerable":true},{"criteria":"cpe:2.3:a:philips:intellispace_portal:8.0:*:*:*:*:*:*:*","matchCriteriaId":"374B9A63-793D-41A1-A02F-4642031DA5FA","vulnerable":true}],"negate":false,"operator":"OR"}]}],"cveTags":[],"descriptions":[{"lang":"en","value":"Microsoft Office 2007 SP3, Microsoft Office 2010 SP2, Microsoft Office 2013 SP1, Microsoft Office 2016, Microsoft Windows Vista SP2, Windows Server 2008 SP2, Windows 7 SP1, Windows 8.1 allow remote attackers to execute arbitrary code via a crafted document, aka \"Microsoft Office/WordPad Remote Code Execution Vulnerability w/Windows API.\""},{"lang":"es","value":"Microsoft Office 2007 SP3, Microsoft Office 2010 SP2, Microsoft Office 2016, Microsoft Windows Vista SP2, Windows Server 2008 SP2, Windows 7 SP1 y Windows 8.1 permiten a atacantes remotos ejecutar código arbitrario a través de un documento manipulado, vulnerabilidad también conocida como \"Microsoft Office DLL Loading Vulnerability\"."}],"id":"CVE-2017-0199","lastModified":"2026-06-17T00:57:15.430","metrics":{"cvssMetricV2":[{"acInsufInfo":false,"baseSeverity":"HIGH","cvssData":{"accessComplexity":"MEDIUM","accessVector":"NETWORK","authentication":"NONE","availabilityImpact":"COMPLETE","baseScore":9.3,"confidentialityImpact":"COMPLETE","integrityImpact":"COMPLETE","vectorString":"AV:N/AC:M/Au:N/C:C/I:C/A:C","version":"2.0"},"exploitabilityScore":8.6,"impactScore":10.0,"obtainAllPrivilege":false,"obtainOtherPrivilege":false,"obtainUserPrivilege":false,"source":"nvd@nist.gov","type":"Primary","userInteractionRequired":true}],"cvssMetricV31":[{"cvssData":{"attackComplexity":"LOW","attackVector":"LOCAL","availabilityImpact":"HIGH","baseScore":7.8,"baseSeverity":"HIGH","confidentialityImpact":"HIGH","integrityImpact":"HIGH","privilegesRequired":"NONE","scope":"UNCHANGED","userInteraction":"REQUIRED","vectorString":"CVSS:3.1/AV:L/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H","version":"3.1"},"exploitabilityScore":1.8,"impactScore":5.9,"source":"nvd@nist.gov","type":"Primary"},{"cvssData":{"attackComplexity":"LOW","attackVector":"LOCAL","availabilityImpact":"HIGH","baseScore":7.8,"baseSeverity":"HIGH","confidentialityImpact":"HIGH","integrityImpact":"HIGH","privilegesRequired":"NONE","scope":"UNCHANGED","userInteraction":"REQUIRED","vectorString":"CVSS:3.1/AV:L/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H","version":"3.1"},"exploitabilityScore":1.8,"impactScore":5.9,"source":"134c704f-9b21-4f2e-91b3-4a467353bcc0","type":"Secondary"}],"ssvcV203":[{"source":"134c704f-9b21-4f2e-91b3-4a467353bcc0","ssvcData":{"id":"CVE-2017-0199","options":[{"exploitation":"active"},{"automatable":"no"},{"technicalImpact":"total"}],"role":"CISA Coordinator","timestamp":"2025-02-10T16:34:00.424194Z","version":"2.0.3"}}]},"published":"2017-04-12T14:59:01.157","references":[{"source":"secure@microsoft.com","tags":["Exploit","Third Party Advisory"],"url":"http://rewtin.blogspot.nl/2017/04/cve-2017-0199-practical-exploitation-poc.html"},{"source":"secure@microsoft.com","tags":["Broken Link","Third Party Advisory","VDB Entry"],"url":"http://www.securityfocus.com/bid/97498"},{"source":"secure@microsoft.com","tags":["Broken Link","Third Party Advisory","VDB Entry"],"url":"http://www.securitytracker.com/id/1038224"},{"source":"secure@microsoft.com","tags":["Exploit","Third Party Advisory"],"url":"https://blog.nviso.be/2017/04/12/analysis-of-a-cve-2017-0199-malicious-rtf-document/"},{"source":"secure@microsoft.com","tags":["Third Party Advisory","US Government Resource"],"url":"https://ics-cert.us-cert.gov/advisories/ICSMA-18-058-02"},{"source":"secure@microsoft.com","tags":["Patch","Vendor Advisory"],"url":"https://portal.msrc.microsoft.com/en-US/security-guidance/advisory/CVE-2017-0199"},{"source":"secure@microsoft.com","tags":["Exploit","Third Party Advisory","VDB Entry"],"url":"https://www.exploit-db.com/exploits/41894/"},{"source":"secure@microsoft.com","tags":["Exploit","Third Party Advisory","VDB Entry"],"url":"https://www.exploit-db.com/exploits/41934/"},{"source":"secure@microsoft.com","tags":["Third Party Advisory","VDB Entry"],"url":"https://www.exploit-db.com/exploits/42995/"},{"source":"secure@microsoft.com","tags":["Broken Link","Exploit","Third Party Advisory"],"url":"https://www.fireeye.com/blog/threat-research/2017/04/cve-2017-0199_useda.html"},{"source":"secure@microsoft.com","tags":["Exploit","Third Party Advisory"],"url":"https://www.mdsec.co.uk/2017/04/exploiting-cve-2017-0199-hta-handler-vulnerability/"},{"source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Exploit","Third Party Advisory"],"url":"http://rewtin.blogspot.nl/2017/04/cve-2017-0199-practical-exploitation-poc.html"},{"source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Broken Link","Third Party Advisory","VDB Entry"],"url":"http://www.securityfocus.com/bid/97498"},{"source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Broken Link","Third Party Advisory","VDB Entry"],"url":"http://www.securitytracker.com/id/1038224"},{"source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Exploit","Third Party Advisory"],"url":"https://blog.nviso.be/2017/04/12/analysis-of-a-cve-2017-0199-malicious-rtf-document/"},{"source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Third Party Advisory","US Government Resource"],"url":"https://ics-cert.us-cert.gov/advisories/ICSMA-18-058-02"},{"source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Patch","Vendor Advisory"],"url":"https://portal.msrc.microsoft.com/en-US/security-guidance/advisory/CVE-2017-0199"},{"source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Exploit","Third Party Advisory","VDB Entry"],"url":"https://www.exploit-db.com/exploits/41894/"},{"source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Exploit","Third Party Advisory","VDB Entry"],"url":"https://www.exploit-db.com/exploits/41934/"},{"source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Third Party Advisory","VDB Entry"],"url":"https://www.exploit-db.com/exploits/42995/"},{"source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Broken Link","Exploit","Third Party Advisory"],"url":"https://www.fireeye.com/blog/threat-research/2017/04/cve-2017-0199_useda.html"},{"source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Exploit","Third Party Advisory"],"url":"https://www.mdsec.co.uk/2017/04/exploiting-cve-2017-0199-hta-handler-vulnerability/"},{"source":"134c704f-9b21-4f2e-91b3-4a467353bcc0","tags":["US Government Resource"],"url":"https://www.cisa.gov/known-exploited-vulnerabilities-catalog?field_cve=CVE-2017-0199"}],"sourceIdentifier":"secure@microsoft.com","vulnStatus":"Analyzed","weaknesses":[{"description":[{"lang":"en","value":"NVD-CWE-noinfo"}],"source":"nvd@nist.gov","type":"Primary"}]}
|