Security Update for Microsoft Office Products (June 2017)

This script is Copyright (C) 2017 Tenable Network Security, Inc.


Synopsis :

An application installed on the remote Windows host is affected by
multiple vulnerabilities.

Description :

The Microsoft Office application installed on the remote Windows host
is missing a security update. It is, therefore, affected by multiple
vulnerabilities :

- Multiple remote code execution vulnerabilities exist in
Microsoft Office due to improper validation of input
before loading dynamic link library (DLL) files. An
unauthenticated, remote attacker can exploit these, by
convincing a user to open a specially crafted Office
document, to execute arbitrary code in the context of
the current user. (CVE-2017-0260. CVE-2017-8506)

- Multiple information disclosure vulnerabilities exist in
Windows Uniscribe due to improper handling of objects in
memory. An unauthenticated, remote attacker can exploit
these, by convincing a user to visit a specially crafted
website or to open a specially crafted document file, to
disclose the contents of memory. (CVE-2017-0282,
CVE-2017-0284, CVE-2017-0285, CVE-2017-8534)

- Multiple remote code execution vulnerabilities exist in
Windows Uniscribe due to improper handling of objects in
memory. An unauthenticated, remote attacker can exploit
these, by convincing a user to visit a specially crafted
website or open a specially crafted document, to execute
arbitrary code in the context of the current user.
(CVE-2017-0283, CVE-2017-8528)

- Multiple information disclosure vulnerabilities exist in
the Windows GDI component due to improper handling of
objects in memory. An unauthenticated, remote attacker
can exploit these, by convincing a user to visit a
specially crafted website or to open a specially crafted
document file, to disclose the contents of memory.
(CVE-2017-0286, CVE-2017-0287, CVE-2017-0288,
CVE-2017-0289, CVE-2017-8531, CVE-2017-8532,
CVE-2017-8533)

- A remote code execution vulnerability exists in
Microsoft Windows due to improper parsing of PDF files.
An unauthenticated, remote attacker can exploit this, by
convincing a user to open a specially crafted PDF file,
to execute arbitrary code in the context of the current
user. (CVE-2017-0292)

- A remote code execution vulnerability exists in
Microsoft Outlook due to improper parsing of email
messages. An unauthenticated, remote attacker can
exploit this, by convincing a user to open a specially
crafted email message, to execute arbitrary code in the
context of the current user. (CVE-2017-8507)

- A security bypass vulnerability exists in Microsoft
Outlook due to improper parsing of file formats. An
unauthenticated, remote attacker can exploit this, by
convincing a user to open a specially crafted Office
document, to bypass security feature protections.
(CVE-2017-8508)

- Multiple remote code execution vulnerabilities exist in
Microsoft Office due to improper handling of objects in
memory. An unauthenticated, remote attacker can exploit
these, by convincing a user to open a specially crafted
Office document, to execute arbitrary code in the
context of the current user. (CVE-2017-8509,
CVE-2017-8510, CVE-2017-8511, CVE-2017-8512)

- A remote code execution vulnerability exists in
Microsoft PowerPoint due to improper handling of objects
in memory. An unauthenticated, remote attacker can
exploit this, by convincing a user to open a specially
crafted file, to execute arbitrary code in the context
of the current user. (CVE-2017-8513)

- A remote code execution vulnerability exists in the
Windows font library due to improper handling of
embedded fonts. An unauthenticated, remote attacker can
exploit this, by convincing a user to visit a specially
crafted website or open a specially crafted Microsoft
document, to execute arbitrary code in the context of
the current user. (CVE-2017-8527)

See also :

https://portal.msrc.microsoft.com/en-us/security-guidance/summary

Solution :

Microsoft has released a set of patches for Microsoft Office 2007,
2010, 2013, and 2016; Microsoft OneNote 2010; Microsoft Outlook 2007,
2010, and 2016; Microsoft PowerPoint 2007; Microsoft Word 2007, 2010,
2013, and 2016; Microsoft Word Viewer; and Microsoft Office
Compatibility Pack.

Risk factor :

High / CVSS Base Score : 9.3
(CVSS2#AV:N/AC:M/Au:N/C:C/I:C/A:C)
CVSS Temporal Score : 7.3
(CVSS2#E:POC/RL:OF/RC:ND)
Public Exploit Available : true