A remote code execution vulnerability exists in Microsoft Office when the software fails to properly handle objects in memory, aka "Office Remote Code Execution Vulnerability". This CVE ID is unique from CVE-2017-8509, CVE-2017-8510, CVE-2017-8511, CVE-2017-8512, and CVE-2017-0260.

The version of Microsoft Outlook installed on the remote host is missing security updates. It is, therefore, affected by multiple vulnerabilities :

  - A remote code execution vulnerability exists in the     way that Microsoft Outlook parses specially crafted     email messages. An attacker who successfully exploited     the vulnerability could take control of an affected     system to then install programs; view, change, or     delete data; or create new accounts with full user     rights. (CVE-2017-0106)

  - A security feature bypass vulnerability exists in     Microsoft Office software when it improperly handles the     parsing of file formats. To exploit the vulnerability,     an attacker would have to convince a user to open a     specially crafted file. (CVE-2017-0204)

  - A remote code execution vulnerability exists when     Microsoft Office improperly validates input before     loading dynamic link library (DLL) files. An attacker     who successfully exploited this vulnerability could take     control of an affected system to then install programs;
    view, change, or delete data; or create new accounts     with full user rights. (CVE-2017-8506)

  - A remote code execution vulnerability exists in the way     that Microsoft Outlook parses specially crafted email     messages. An attacker who successfully exploited this     vulnerability could take control of an affected system.
   (CVE-2017-8507)

  - A security feature bypass vulnerability exists in     Microsoft Office software when it improperly handles the     parsing of file formats. (CVE-2017-8508)

  - A security feature bypass vulnerability exists when     Microsoft Office Outlook improperly handles input.
    An attacker who successfully exploited the vulnerability     could execute arbitrary commands. (CVE-2017-8571)

  - An information disclosure vulnerability exists when     Microsoft Outlook fails to properly validate     authentication requests. (CVE-2017-8572)

  - A remote code execution vulnerability exists in the way     that Microsoft Outlook parses specially crafted email     messages. An attacker who successfully exploited the     vulnerability could take control of an affected system.
    (CVE-2017-8663)

The Microsoft Office application installed on the remote Windows host is missing a security update. It is, therefore, affected by multiple vulnerabilities :

  - Multiple remote code execution vulnerabilities exist in     Microsoft Office due to improper validation of input     before loading dynamic link library (DLL) files. An     unauthenticated, remote attacker can exploit these, by     convincing a user to open a specially crafted Office     document, to execute arbitrary code in the context of     the current user. (CVE-2017-0260. CVE-2017-8506)

  - Multiple information disclosure vulnerabilities exist in     Windows Uniscribe due to improper handling of objects in     memory. An unauthenticated, remote attacker can exploit     these, by convincing a user to visit a specially crafted     website or to open a specially crafted document file, to     disclose the contents of memory. (CVE-2017-0282,     CVE-2017-0284, CVE-2017-0285, CVE-2017-8534)

  - Multiple remote code execution vulnerabilities exist in     Windows Uniscribe due to improper handling of objects in     memory. An unauthenticated, remote attacker can exploit     these, by convincing a user to visit a specially crafted     website or open a specially crafted document, to execute     arbitrary code in the context of the current user.
    (CVE-2017-0283, CVE-2017-8528)

  - Multiple information disclosure vulnerabilities exist in     the Windows GDI component due to improper handling of     objects in memory. An unauthenticated, remote attacker     can exploit these, by convincing a user to visit a     specially crafted website or to open a specially crafted     document file, to disclose the contents of memory.
    (CVE-2017-0286, CVE-2017-0287, CVE-2017-0288,     CVE-2017-0289, CVE-2017-8531, CVE-2017-8532,     CVE-2017-8533)

  - A remote code execution vulnerability exists in     Microsoft Windows due to improper parsing of PDF files.
    An unauthenticated, remote attacker can exploit this, by     convincing a user to open a specially crafted PDF file,     to execute arbitrary code in the context of the current     user. (CVE-2017-0292)

  - A remote code execution vulnerability exists in     Microsoft Outlook due to improper parsing of email     messages. An unauthenticated, remote attacker can     exploit this, by convincing a user to open a specially     crafted email message, to execute arbitrary code in the     context of the current user. (CVE-2017-8507)

  - A security bypass vulnerability exists in Microsoft     Outlook due to improper parsing of file formats. An     unauthenticated, remote attacker can exploit this, by     convincing a user to open a specially crafted Office     document, to bypass security feature protections.
    (CVE-2017-8508)

  - Multiple remote code execution vulnerabilities exist in     Microsoft Office due to improper handling of objects in     memory. An unauthenticated, remote attacker can exploit     these, by convincing a user to open a specially crafted     Office document, to execute arbitrary code in the     context of the current user. (CVE-2017-8509,     CVE-2017-8510, CVE-2017-8511, CVE-2017-8512,     CVE-2017-8550)

  - A remote code execution vulnerability exists in     Microsoft PowerPoint due to improper handling of objects     in memory. An unauthenticated, remote attacker can     exploit this, by convincing a user to open a specially     crafted file, to execute arbitrary code in the context     of the current user. (CVE-2017-8513)

  - A remote code execution vulnerability exists in the     Windows font library due to improper handling of     embedded fonts. An unauthenticated, remote attacker can     exploit this, by convincing a user to visit a specially     crafted website or open a specially crafted Microsoft     document, to execute arbitrary code in the context of     the current user. (CVE-2017-8527)

ID	Name	Product	Family	Type	Severity
103456	Security Updates for Outlook (September 2017)	Nessus	Windows : Microsoft Bulletins	Local	high
100782	Security Update for Microsoft Office Products (June 2017)	Nessus	Windows : Microsoft Bulletins	Local	high

Detections

Analytics

CVE-2017-8506

high

Tenable Plugins

high

high