A remote code execution vulnerability exists in Excel Services, Microsoft Excel 2007 Service Pack 3, Microsoft Excel 2010 Service Pack 2, Microsoft Excel 2013 Service Pack 1, Microsoft Excel 2013 RT Service Pack 1, Microsoft Excel 2016, Microsoft Office Web Apps 2013, Microsoft Office Compatibility Pack Service Pack 3, Microsoft Excel Web App 2013 Service Pack 1, Microsoft Excel Viewer 2007 Service Pack 3, and Office Online Server when they fail to properly handle objects in memory, aka "Microsoft Office Memory Corruption Vulnerability". This CVE ID is unique from CVE-2017-8630, CVE-2017-8632, and CVE-2017-8744.

The Microsoft Office Online Server or Microsoft Office Web Apps installation on the remote host is missing security updates. It is, therefore, affected by multiple vulnerabilities :

  - A remote code execution vulnerability exists in     Microsoft Office software when it fails to properly     handle objects in memory. An attacker who successfully     exploited the vulnerability could use a specially     crafted file to perform actions in the security context     of the current user. For example, the file could then     take actions on behalf of the logged-on user with the     same permissions as the current user. Exploitation of     this vulnerability requires that a user open a specially     crafted file with an affected version of Microsoft     Office software. In an email attack scenario, an     attacker could exploit the vulnerability by sending the     specially crafted file to the user and convincing the     user to open the file. In a web-based attack scenario,     an attacker could host a website (or leverage a     compromised website that accepts or hosts user-provided     content) that contains a specially crafted file that is     designed to exploit the vulnerability. However, an     attacker would have no way to force the user to visit     the website. Instead, an attacker would have to convince     the user to click a link, typically by way of an     enticement in an email or Instant Messenger message, and     then convince the user to open the specially crafted     file. The security update addresses the vulnerability by     correcting how Microsoft Office handles files in memory.
    (CVE-2017-8631)

  - A remote code execution vulnerability exists in     Microsoft Office software when the software fails to     properly handle objects in memory. An attacker who     successfully exploited the vulnerability could run     arbitrary code in the context of the current user. If     the current user is logged on with administrative user     rights, an attacker could take control of the affected     system. An attacker could then install programs; view,     change, or delete data; or create new accounts with full     user rights. Users whose accounts are configured to have     fewer user rights on the system could be less impacted     than users who operate with administrative user rights.
    Exploitation of the vulnerability requires that a user     open a specially crafted file with an affected version     of Microsoft Office software. In an email attack     scenario, an attacker could exploit the vulnerability by     sending the specially crafted file to the user and     convincing the user to open the file. In a web-based     attack scenario, an attacker could host a website (or     leverage a compromised website that accepts or hosts     user-provided content) that contains a specially crafted     file designed to exploit the vulnerability. An attacker     would have no way to force users to visit the website.
    Instead, an attacker would have to convince users to     click a link, typically by way of an enticement in an     email or instant message, and then convince them to open     the specially crafted file. Note that the Preview Pane     is not an attack vector for this vulnerability. The     security update addresses the vulnerability by     correcting how Office handles objects in memory.
    (CVE-2017-8742, CVE-2017-8743)

  - A remote code execution vulnerability exists due to the     way Windows Uniscribe handles objects in memory. An     attacker who successfully exploited this vulnerability     could take control of the affected system. An attacker     could then install programs; view, change, or delete     data; or create new accounts with full user rights.
    Users whose accounts are configured to have fewer user     rights on the system could be less impacted than users     who operate with administrative user rights. There are     multiple ways an attacker could exploit this     vulnerability: In a web-based attack scenario, an     attacker could host a specially crafted website designed     to exploit this vulnerability and then convince a user     to view the website. An attacker would have no way to     force users to view the attacker-controlled content.
    Instead, an attacker would have to convince users to     take action, typically by getting them to click a link     in an email or instant message that takes users to the     attacker's website, or by opening an attachment sent     through email. In a file-sharing attack scenario, an     attacker could provide a specially crafted document file     designed to exploit this vulnerability and then convince     a user to open the document file.The security update     addresses the vulnerability by correcting how Windows     Uniscribe handles objects in memory. (CVE-2017-8696)

The Microsoft Sharepoint Server installation on the remote host is missing security updates. It is, therefore, affected by multiple vulnerabilities :

  - A remote code execution vulnerability exists in     Microsoft Office software when it fails to properly     handle objects in memory. An attacker who successfully     exploited the vulnerability could use a specially     crafted file to perform actions in the security context     of the current user. For example, the file could then     take actions on behalf of the logged-on user with the     same permissions as the current user. Exploitation of     this vulnerability requires that a user open a specially     crafted file with an affected version of Microsoft     Office software. In an email attack scenario, an     attacker could exploit the vulnerability by sending the     specially crafted file to the user and convincing the     user to open the file. In a web-based attack scenario,     an attacker could host a website (or leverage a     compromised website that accepts or hosts user-provided     content) that contains a specially crafted file that is     designed to exploit the vulnerability. However, an     attacker would have no way to force the user to visit     the website. Instead, an attacker would have to convince     the user to click a link, typically by way of an     enticement in an email or Instant Messenger message, and     then convince the user to open the specially crafted     file. The security update addresses the vulnerability by     correcting how Microsoft Office handles files in memory.
    (CVE-2017-8631)

  - A remote code execution vulnerability exists in     Microsoft Office software when the software fails to     properly handle objects in memory. An attacker who     successfully exploited the vulnerability could run     arbitrary code in the context of the current user. If     the current user is logged on with administrative user     rights, an attacker could take control of the affected     system. An attacker could then install programs; view,     change, or delete data; or create new accounts with full     user rights. Users whose accounts are configured to have     fewer user rights on the system could be less impacted     than users who operate with administrative user rights.
    Exploitation of the vulnerability requires that a user     open a specially crafted file with an affected version     of Microsoft Office software. In an email attack     scenario, an attacker could exploit the vulnerability by     sending the specially crafted file to the user and     convincing the user to open the file. In a web-based     attack scenario, an attacker could host a website (or     leverage a compromised website that accepts or hosts     user-provided content) that contains a specially crafted     file designed to exploit the vulnerability. An attacker     would have no way to force users to visit the website.
    Instead, an attacker would have to convince users to     click a link, typically by way of an enticement in an     email or instant message, and then convince them to open     the specially crafted file. Note that the Preview Pane     is not an attack vector for this vulnerability. The     security update addresses the vulnerability by     correcting how Office handles objects in memory.
    (CVE-2017-8742, CVE-2017-8743)

  - An elevation of privilege vulnerability exists when     Microsoft SharePoint Server does not properly sanitize a     specially crafted web request to an affected SharePoint     server. An authenticated attacker could exploit the     vulnerability by sending a specially crafted request to     an affected SharePoint server. The attacker who     successfully exploited the vulnerability could then     perform cross-site scripting attacks on affected systems     and run script in the security context of the current     user. These attacks could allow the attacker to read     content that the attacker is not authorized to read, use     the victim's identity to take actions on the SharePoint     site on behalf of the user, such as change permissions     and delete content, and inject malicious content in the     browser of the user. The security update addresses the     vulnerability by helping to ensure that SharePoint     Server properly sanitizes web requests. (CVE-2017-8629)

  - A cross-site scripting (XSS) vulnerability exists when     Microsoft SharePoint Server does not properly sanitize a     specially crafted web request to an affected SharePoint     server. An authenticated attacker could exploit the     vulnerability by sending a specially crafted request to     an affected SharePoint server. The attacker who     successfully exploited the vulnerability could then     perform cross-site scripting attacks on affected systems     and run script in the security context of the current     user. The attacks could allow the attacker to read     content that the attacker is not authorized to read, use     the victim's identity to take actions on the SharePoint     site on behalf of the user, such as change permissions     and delete content, and inject malicious content in the     browser of the user. The security update addresses the     vulnerability by helping to ensure that SharePoint     Server properly sanitizes web requests. (CVE-2017-8745)

The Microsoft Excel Products are missing security updates.
It is, therefore, affected by multiple vulnerabilities :

  - A remote code execution vulnerability exists in     Microsoft Office software when it fails to properly     handle objects in memory. An attacker who successfully     exploited the vulnerability could use a specially     crafted file to perform actions in the security context     of the current user. For example, the file could then     take actions on behalf of the logged-on user with the     same permissions as the current user. Exploitation of     this vulnerability requires that a user open a specially     crafted file with an affected version of Microsoft     Office software. In an email attack scenario, an     attacker could exploit the vulnerability by sending the     specially crafted file to the user and convincing the     user to open the file. In a web-based attack scenario,     an attacker could host a website (or leverage a     compromised website that accepts or hosts user-provided     content) that contains a specially crafted file that is     designed to exploit the vulnerability. However, an     attacker would have no way to force the user to visit     the website. Instead, an attacker would have to convince     the user to click a link, typically by way of an     enticement in an email or Instant Messenger message, and     then convince the user to open the specially crafted     file. The security update addresses the vulnerability by     correcting how Microsoft Office handles files in memory.
    (CVE-2017-8631, CVE-2017-8632)

The Microsoft Office Products are missing security updates.
It is, therefore, affected by multiple vulnerabilities :

  - A remote code execution vulnerability exists in     Microsoft Office software when it fails to properly     handle objects in memory. An attacker who successfully     exploited the vulnerability could use a specially     crafted file to perform actions in the security context     of the current user. For example, the file could then     take actions on behalf of the logged-on user with the     same permissions as the current user. Exploitation of     this vulnerability requires that a user open a specially     crafted file with an affected version of Microsoft     Office software. In an email attack scenario, an     attacker could exploit the vulnerability by sending the     specially crafted file to the user and convincing the     user to open the file. In a web-based attack scenario,     an attacker could host a website (or leverage a     compromised website that accepts or hosts user-provided     content) that contains a specially crafted file that is     designed to exploit the vulnerability. However, an     attacker would have no way to force the user to visit     the website. Instead, an attacker would have to convince     the user to click a link, typically by way of an     enticement in an email or Instant Messenger message, and     then convince the user to open the specially crafted     file. The security update addresses the vulnerability by     correcting how Microsoft Office handles files in memory.
    (CVE-2017-8631)

  - A remote code execution vulnerability exists when the     Windows font library improperly handles specially     crafted embedded fonts. An attacker who successfully     exploited this vulnerability could take control of the     affected system. An attacker could then install     programs; view, change, or delete data; or create new     accounts with full user rights. Users whose accounts are     configured to have fewer user rights on the system could     be less impacted than users who operate with     administrative user rights. There are multiple ways an     attacker could exploit this vulnerability. In a web-     based attack scenario, an attacker could host a     specially crafted website that is designed to exploit     this vulnerability and then convince a user to view the     website. An attacker would have no way to force users to     view the attacker-controlled content. Instead, an     attacker would have to convince users to take action,     typically by getting them to click a link in an email     message or in an Instant Messenger message that takes     users to the attacker's website, or by opening an     attachment sent through email. In a file sharing attack     scenario, an attacker could provide a specially crafted     document file that is designed to exploit this     vulnerability, and then convince a user to open the     document file. The security update addresses the     vulnerabilities by correcting how the Windows font     library handles embedded fonts. (CVE-2017-8682)

  - An information disclosure vulnerability exists when     Windows Uniscribe improperly discloses the contents of     its memory. An attacker who successfully exploited the     vulnerability could obtain information to further     compromise the users system. There are multiple ways an     attacker could exploit the vulnerability, such as by     convincing a user to open a specially crafted document     or by convincing a user to visit an untrusted webpage.
    The update addresses the vulnerability by correcting how     Windows Uniscribe handles objects in memory.
    (CVE-2017-8695)

  - A remote code execution vulnerability exists due to the     way Windows Uniscribe handles objects in memory. An     attacker who successfully exploited this vulnerability     could take control of the affected system. An attacker     could then install programs; view, change, or delete     data; or create new accounts with full user rights.
    Users whose accounts are configured to have fewer user     rights on the system could be less impacted than users     who operate with administrative user rights. There are     multiple ways an attacker could exploit this     vulnerability: In a web-based attack scenario, an     attacker could host a specially crafted website designed     to exploit this vulnerability and then convince a user     to view the website. An attacker would have no way to     force users to view the attacker-controlled content.
    Instead, an attacker would have to convince users to     take action, typically by getting them to click a link     in an email or instant message that takes users to the     attacker's website, or by opening an attachment sent     through email. In a file-sharing attack scenario, an     attacker could provide a specially crafted document file     designed to exploit this vulnerability and then convince     a user to open the document file.The security update     addresses the vulnerability by correcting how Windows     Uniscribe handles objects in memory. (CVE-2017-8696)

  - A remote code execution vulnerability exists in     Microsoft Office software when the software fails to     properly handle objects in memory. An attacker who     successfully exploited the vulnerability could run     arbitrary code in the context of the current user. If     the current user is logged on with administrative user     rights, an attacker could take control of the affected     system. An attacker could then install programs; view,     change, or delete data; or create new accounts with full     user rights. Users whose accounts are configured to have     fewer user rights on the system could be less impacted     than users who operate with administrative user rights.
    Exploitation of the vulnerability requires that a user     open a specially crafted file with an affected version     of Microsoft Office software. In an email attack     scenario, an attacker could exploit the vulnerability by     sending the specially crafted file to the user and     convincing the user to open the file. In a web-based     attack scenario, an attacker could host a website (or     leverage a compromised website that accepts or hosts     user-provided content) that contains a specially crafted     file designed to exploit the vulnerability. An attacker     would have no way to force users to visit the website.
    Instead, an attacker would have to convince users to     click a link, typically by way of an enticement in an     email or instant message, and then convince them to open     the specially crafted file. Note that the Preview Pane     is not an attack vector for this vulnerability. The     security update addresses the vulnerability by     correcting how Office handles objects in memory.
    (CVE-2017-8742)

  - An information disclosure vulnerability exists in the     way that the Windows Graphics Device Interface (GDI)     handles objects in memory, allowing an attacker to     retrieve information from a targeted system. By itself,     the information disclosure does not allow arbitrary code     execution; however, it could allow arbitrary code to be     run if the attacker uses it in combination with another     vulnerability. To exploit this vulnerability, an     attacker would have to log on to an affected system and     run a specially crafted application. Note that where the     severity is indicated as Critical in the Affected     Products table, the Preview Pane is an attack vector for     this vulnerability. The security update addresses the     vulnerability by correcting how GDI handles memory     addresses. (CVE-2017-8676)

Microsoft Office Compatibility Pack SP3 is missing security updates.
It is, therefore, affected by multiple vulnerabilities :

  - A remote code execution vulnerability exists in     Microsoft Office software when it fails to properly     handle objects in memory. An attacker who successfully     exploited the vulnerability could use a specially     crafted file to perform actions in the security context     of the current user. For example, the file could then     take actions on behalf of the logged-on user with the     same permissions as the current user. Exploitation of     this vulnerability requires that a user open a specially     crafted file with an affected version of Microsoft     Office software. In an email attack scenario, an     attacker could exploit the vulnerability by sending the     specially crafted file to the user and convincing the     user to open the file. In a web-based attack scenario,     an attacker could host a website (or leverage a     compromised website that accepts or hosts user-provided     content) that contains a specially crafted file that is     designed to exploit the vulnerability. However, an     attacker would have no way to force the user to visit     the website. Instead, an attacker would have to convince     the user to click a link, typically by way of an     enticement in an email or Instant Messenger message, and     then convince the user to open the specially crafted     file. The security update addresses the vulnerability by     correcting how Microsoft Office handles files in memory.
    (CVE-2017-8631, CVE-2017-8632)

  - A remote code execution vulnerability exists in     Microsoft Office software when the software fails to     properly handle objects in memory. An attacker who     successfully exploited the vulnerability could run     arbitrary code in the context of the current user. If     the current user is logged on with administrative user     rights, an attacker could take control of the affected     system. An attacker could then install programs; view,     change, or delete data; or create new accounts with full     user rights. Users whose accounts are configured to have     fewer user rights on the system could be less impacted     than users who operate with administrative user rights.
    Exploitation of the vulnerability requires that a user     open a specially crafted file with an affected version     of Microsoft Office software. In an email attack     scenario, an attacker could exploit the vulnerability by     sending the specially crafted file to the user and     convincing the user to open the file. In a web-based     attack scenario, an attacker could host a website (or     leverage a compromised website that accepts or hosts     user-provided content) that contains a specially crafted     file designed to exploit the vulnerability. An attacker     would have no way to force users to visit the website.
    Instead, an attacker would have to convince users to     click a link, typically by way of an enticement in an     email or instant message, and then convince them to open     the specially crafted file. Note that the Preview Pane     is not an attack vector for this vulnerability. The     security update addresses the vulnerability by     correcting how Office handles objects in memory.
    (CVE-2017-8742)

The Microsoft Office application installed on the remote macOS or Mac OS X host is missing a security update. It is, therefore, affected by the following vulnerabilities:

  - A remote code execution vulnerability exists in     Microsoft Office software when the software fails to     properly handle objects in memory. An attacker who     successfully exploited the vulnerability could run     arbitrary code in the context of the current user. If     the current user is logged on with administrative user     rights, an attacker could take control of the affected     system. An attacker could then install programs; view,     change, or delete data; or create new accounts with full     user rights. Users whose accounts are configured to have     fewer user rights on the system could be less impacted     than users who operate with administrative user rights.
    Exploitation of the vulnerability requires that a user     open a specially crafted file with an affected version     of Microsoft Office software. In an email attack     scenario, an attacker could exploit the vulnerability by     sending the specially crafted file to the user and     convincing the user to open the file. In a web-based     attack scenario, an attacker could host a website (or     leverage a compromised website that accepts or hosts     user-provided content) that contains a specially crafted     file designed to exploit the vulnerability. An attacker     would have no way to force users to visit the website.
    Instead, an attacker would have to convince users to     click a link, typically by way of an enticement in an     email or instant message, and then convince them to open     the specially crafted file. Note that the Preview Pane     is not an attack vector for this vulnerability. The     security update addresses the vulnerability by     correcting how Office handles objects in memory.
    (CVE-2017-8567)

  - A remote code execution vulnerability exists in     Microsoft Office software when it fails to properly     handle objects in memory. An attacker who successfully     exploited the vulnerability could use a specially     crafted file to perform actions in the security context     of the current user. For example, the file could then     take actions on behalf of the logged-on user with the     same permissions as the current user. Exploitation of     this vulnerability requires that a user open a specially     crafted file with an affected version of Microsoft     Office software. In an email attack scenario, an     attacker could exploit the vulnerability by sending the     specially crafted file to the user and convincing the     user to open the file. In a web-based attack scenario,     an attacker could host a website (or leverage a     compromised website that accepts or hosts user-provided     content) that contains a specially crafted file that is     designed to exploit the vulnerability. However, an     attacker would have no way to force the user to visit     the website. Instead, an attacker would have to convince     the user to click a link, typically by way of an     enticement in an email or Instant Messenger message, and     then convince the user to open the specially crafted     file. The security update addresses the vulnerability by     correcting how Microsoft Office handles files in memory.
    (CVE-2017-8631, CVE-2017-8632)

  - An information disclosure vulnerability exists in the     way that the Windows Graphics Device Interface (GDI)     handles objects in memory, allowing an attacker to     retrieve information from a targeted system. By itself,     the information disclosure does not allow arbitrary code     execution; however, it could allow arbitrary code to be     run if the attacker uses it in combination with another     vulnerability. To exploit this vulnerability, an     attacker would have to log on to an affected system and     run a specially crafted application. Note that where the     severity is indicated as Critical in the Affected     Products table, the Preview Pane is an attack vector for     this vulnerability. The security update addresses the     vulnerability by correcting how GDI handles memory     addresses. (CVE-2017-8676)

ID	Name	Product	Family	Type	Severity
103192	Security Update for Microsoft Office Online Server and Office Web Apps (September 2017)	Nessus	Windows : Microsoft Bulletins	Local	high
103141	Security Updates for Microsoft Sharepoint Server (September 2017)	Nessus	Windows : Microsoft Bulletins	Local	high
103138	Security Update for Microsoft Office Excel Products (September 2017)	Nessus	Windows : Microsoft Bulletins	Local	high
103135	Security Updates for Microsoft Office Viewers (September 2017)	Nessus	Windows : Microsoft Bulletins	Local	high
103134	Security Updates for Microsoft Office Compatibility Pack SP3 (September 2017)	Nessus	Windows : Microsoft Bulletins	Local	high
103126	Security Update for Microsoft Office (September 2017) (macOS)	Nessus	MacOS X Local Security Checks	Local	high

Detections

Analytics

CVE-2017-8631

high

Tenable Plugins

high

high

high

high

high

high