Microsoft Excel 2007 SP3, Microsoft Outlook 2010 SP2, Microsoft Outlook 2013 SP1, and Microsoft Outlook 2016 allow remote attackers to execute arbitrary code or cause a denial of service (memory corruption) via a crafted document, aka "Microsoft Office Memory Corruption Vulnerability."

The version of Microsoft Outlook installed on the remote host is missing security updates. It is, therefore, affected by multiple vulnerabilities :

  - A remote code execution vulnerability exists in the     way that Microsoft Outlook parses specially crafted     email messages. An attacker who successfully exploited     the vulnerability could take control of an affected     system to then install programs; view, change, or     delete data; or create new accounts with full user     rights. (CVE-2017-0106)

  - A security feature bypass vulnerability exists in     Microsoft Office software when it improperly handles the     parsing of file formats. To exploit the vulnerability,     an attacker would have to convince a user to open a     specially crafted file. (CVE-2017-0204)

  - A remote code execution vulnerability exists when     Microsoft Office improperly validates input before     loading dynamic link library (DLL) files. An attacker     who successfully exploited this vulnerability could take     control of an affected system to then install programs;
    view, change, or delete data; or create new accounts     with full user rights. (CVE-2017-8506)

  - A remote code execution vulnerability exists in the way     that Microsoft Outlook parses specially crafted email     messages. An attacker who successfully exploited this     vulnerability could take control of an affected system.
   (CVE-2017-8507)

  - A security feature bypass vulnerability exists in     Microsoft Office software when it improperly handles the     parsing of file formats. (CVE-2017-8508)

  - A security feature bypass vulnerability exists when     Microsoft Office Outlook improperly handles input.
    An attacker who successfully exploited the vulnerability     could execute arbitrary commands. (CVE-2017-8571)

  - An information disclosure vulnerability exists when     Microsoft Outlook fails to properly validate     authentication requests. (CVE-2017-8572)

  - A remote code execution vulnerability exists in the way     that Microsoft Outlook parses specially crafted email     messages. An attacker who successfully exploited the     vulnerability could take control of an affected system.
    (CVE-2017-8663)

The Microsoft Office application, Office Web Apps, or SharePoint Server installed on the remote Windows host is missing a security update. It is, therefore, affected by multiple vulnerabilities :

  - An arbitrary code execution vulnerability exists in     Microsoft Outlook due to improper parsing of email     messages. An unauthenticated, remote attacker can     exploit this, via a specially crafted email message, to     execute arbitrary code. (CVE-2017-0106)

  - An information disclosure vulnerability exists in     Microsoft Office due to improper handling of objects in     memory. An unauthenticated, remote attacker can exploit     this, by convincing a user to open a specially crafted     Excel file, to disclose the contents of memory.
    (CVE-2017-0194)

  - A cross-site scripting (XSS) vulnerability exists in     Office Web Apps Server due to improper validation of     input before returning it to users. An authenticated,     remote attacker can exploit this, via a specially     crafted request, to execute arbitrary script code in a     user's browser session. (CVE-2017-0195)

  - An arbitrary code execution vulnerability exists in     Microsoft Office due to improper validation of input     before loading dynamic link library (DLL) files. An     unauthenticated, remote attacker can exploit this, by     convincing a user to open a specially crafted Office     document, to execute arbitrary code. (CVE-2017-0197)

  - An arbitrary code execution vulnerability exists in     Microsoft Office and Windows WordPad due to improper     validation of user-supplied input. An unauthenticated,     remote attacker can exploit this, by convincing a user     to open a specially crafted file, to execute arbitrary     code. Note that this vulnerability is being utilized to     spread the Petya ransomware. (CVE-2017-0199)

  - A security feature bypass vulnerability exists in     Microsoft Office due to improper parsing of file     formats. An unauthenticated, remote attacker can exploit     this, by convincing a user into opening a specially     crafted file, to bypass security features.
    (CVE-2017-0204)

  - A spoofing vulnerability in Microsoft Outlook due to     improper validation of input passed via HTML tags. An     unauthenticated, remote attacker can exploit this, by     sending an email with specific HTML tags, to display a     malicious authentication prompt and gain access to a     user's authentication information or login credentials.
    (CVE-2017-0207)

ID	Name	Product	Family	Type	Severity
103456	Security Updates for Outlook (September 2017)	Nessus	Windows : Microsoft Bulletins	Local	high
99314	Security Update for Microsoft Office Products (April 2017) (Petya)	Nessus	Windows : Microsoft Bulletins	Local	high

Detections

Analytics

CVE-2017-0106

high

Tenable Plugins

high

high