Microsoft Excel 2007 Service Pack 3, Microsoft Excel 2010 Service Pack 2, Microsoft Excel 2013 Service Pack 1, Microsoft Excel 2013 RT Service Pack 1, Microsoft Excel 2016, Microsoft Office Compatibility Pack Service Pack 3, and Microsoft Excel Viewer 2007 Service Pack 3 allow an attacker to run arbitrary code in the context of the current user by failing to properly handle objects in memory, aka "Microsoft Excel Memory Corruption Vulnerability".

The Microsoft Office Products are missing security updates.
It is, therefore, affected by multiple vulnerabilities :

  - A remote code execution vulnerability exists in     Microsoft Office software when the software fails to     properly handle objects in memory. An attacker who     successfully exploited the vulnerability could run     arbitrary code in the context of the current user. If     the current user is logged on with administrative user     rights, an attacker could take control of the affected     system. An attacker could then install programs; view,     change, or delete data; or create new accounts with full     user rights.  (CVE-2017-11878)

  - A security feature bypass vulnerability exists in     Microsoft Office software by not enforcing macro     settings on an Excel document. The security feature     bypass by itself does not allow arbitrary code     execution. To successfully exploit the vulnerability, an     attacker would have to embed a control in an Excel     worksheet that specifies a macro should be run.
    (CVE-2017-11877)

The Microsoft Office Compatibility SP3 are missing security updates.
It is, therefore, affected by multiple vulnerabilities :

    - A remote code execution vulnerability exists in     Microsoft Office software when the software fails to     properly handle objects in memory. An attacker who     successfully exploited the vulnerability could run     arbitrary code in the context of the current user. If     the current user is logged on with administrative user     rights, an attacker could take control of the affected     system. An attacker could then install programs; view,     change, or delete data; or create new accounts with full     user rights.  (CVE-2017-11854, CVE-2017-11878)

    - A security feature bypass vulnerability exists in     Microsoft Office software by not enforcing macro     settings on an Excel document. The security feature     bypass by itself does not allow arbitrary code     execution. To successfully exploit the vulnerability, an     attacker would have to embed a control in an Excel     worksheet that specifies a macro should be run.
    (CVE-2017-11877)

The Microsoft Excel Products are missing security updates.
It is, therefore, affected by multiple vulnerabilities :

  - A remote code execution vulnerability exists in     Microsoft Office software when the software fails to     properly handle objects in memory. An attacker who     successfully exploited the vulnerability could run     arbitrary code in the context of the current user. If     the current user is logged on with administrative user     rights, an attacker could take control of the affected     system. An attacker could then install programs; view,     change, or delete data; or create new accounts with full     user rights.  (CVE-2017-11878)

  - A security feature bypass vulnerability exists in     Microsoft Office software by not enforcing macro     settings on an Excel document. The security feature     bypass by itself does not allow arbitrary code     execution. To successfully exploit the vulnerability, an     attacker would have to embed a control in an Excel     worksheet that specifies a macro should be run.
    (CVE-2017-11877)

  - A remote code execution vulnerability exists in     Microsoft Office software when the software fails to     properly handle objects in memory. An attacker who     successfully exploited the vulnerability could run     arbitrary code in the context of the current user. If     the current user is logged on with administrative user     rights, an attacker could take control of the affected     system. An attacker could then install programs; view,     change, or delete data; or create new accounts with     full user rights. Users whose accounts are configured     to have fewer user rights on the system could be less     impacted than users who operate with administrative     user rights.

    Exploitation of the vulnerability requires that a user     open a specially crafted file with an affected version     of Microsoft Office. In an email attack scenario, an     attacker could exploit the vulnerability by sending the     specially crafted file to the user and convincing the     user to open the file. In a web-based attack scenario,     an attacker could host a website (or leverage a     compromised website that accepts or hosts user-provided     content) containing a specially crafted file designed     to exploit the vulnerability. An attacker would have no     way to force users to visit the website. Instead, an     attacker would have to convince users to click a link,     typically by way of an enticement in an email or     instant message, and then convince them to open the     specially crafted file.  (CVE-2017-11884)

ID	Name	Product	Family	Severity
104559	Security Updates for Microsoft Office Viewer Products (November 2017)	Nessus	Windows : Microsoft Bulletins	high
104558	Security Updates for Microsoft Office Compatibility SP3 (November 2017)	Nessus	Windows : Microsoft Bulletins	high
104556	Security Updates for Microsoft Excel Products (November 2017)	Nessus	Windows : Microsoft Bulletins	high

Detections

Analytics

CVE-2017-11878

high

Tenable Plugins

high

high

high