Security Update for Microsoft Office (April 2017) (macOS)

High Nessus Plugin ID 99313


An application installed on the remote macOS or Mac OS X host is affected by a spoofing vulnerability.


The Microsoft Office application installed on the remote macOS or Mac OS X host is missing a security update. It is, therefore, affected by a spoofing vulnerability in Microsoft Outlook due to improper validation of input passed via HTML tags. An unauthenticated, remote attacker can exploit this, by sending an email with specific HTML tags, to display a malicious authentication prompt and gain access to a user's authentication information or login credentials.


Microsoft has released a patch for Microsoft Outlook for Mac 2011.

See Also

Plugin Details

Severity: High

ID: 99313

File Name: macosx_ms17_apr_office.nasl

Version: $Revision: 1.4 $

Type: local

Agent: macosx

Published: 2017/04/12

Modified: 2017/08/15

Dependencies: 86383

Risk Information

Risk Factor: High


Base Score: 9.3

Temporal Score: 6.9

Vector: CVSS2#AV:N/AC:M/Au:N/C:C/I:C/A:C

Temporal Vector: CVSS2#E:U/RL:OF/RC:C


Base Score: 8.8

Vector: CVSS:3.0/AV:N/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H

Vulnerability Information

CPE: cpe:/a:microsoft:outlook_for_mac

Required KB Items: Host/MacOSX/Version, installed_sw/Microsoft Outlook

Exploit Available: false

Exploit Ease: No known exploits are available

Patch Publication Date: 2017/04/11

Vulnerability Publication Date: 2017/04/11

Reference Information

CVE: CVE-2017-0207

BID: 97463

OSVDB: 155366

MSKB: 3212218

MSFT: MS17-3212218