Microsoft Office allows a remote code execution vulnerability due to the way that it handles objects in memory, aka "Microsoft Office Remote Code Execution Vulnerability". This CVE ID is unique from CVE-2017-8570.

The Microsoft Office Online Server or SharePoint Server 2010 Office Web Apps installed on the remote Windows host is missing a security update. It is, therefore, affected by multiple remote code execution vulnerabilities due to improper handling of objects in memory. An unauthenticated, remote attacker can exploit these vulnerabilities, by convincing a user to open a specially crafted document or to visit a specially crafted website, to execute arbitrary code in the context of the current user.

The Microsoft SharePoint Server or Project Server installed on the remote Windows host is missing a security update. It is, therefore, affected by multiple vulnerabilities :

  - A remote code execution vulnerability exists in     Microsoft Office due to improper handling of objects in     memory. An unauthenticated, remote attacker can exploit     this, by convincing a user to visit a specially crafted     website or open a specially crafted document, to     execute arbitrary code in the context of the current     user. (CVE-2017-0243)

  - A remote code execution vulnerability exists in     Microsoft Office due to improper handling of objects in     memory. An unauthenticated, remote attacker can exploit     this, by convincing a user to visit a specially crafted     website or open a specially crafted document, to     execute arbitrary code in the context of the current     user. (CVE-2017-8501)

  - A cross-site scripting (XSS) vulnerability exists in     Microsoft SharePoint Server due improper validation of     user-supplied input in web requests. An authenticated,     remote attacker can exploit this, via a specially     crafted request, to execute arbitrary script code in a     user's browser session. (CVE-2017-8569)

The Microsoft Office application, Microsoft Office Compatibility Pack, or Microsoft Excel Viewer installed on the remote Windows host is missing a security update. It is, therefore, affected by multiple remote code execution vulnerabilities due to improper handling of objects in memory. An unauthenticated, remote attacker can exploit these vulnerabilities, by convincing a user to open a specially crafted document or to visit a specially crafted website, to execute arbitrary code in the context of the current user.

Note that KB2880514 for Office 2007 and KB3203468 for Office 2010 SP2 are only applicable to Office installations with the Galician language pack installed.

ID	Name	Product	Family	Severity
101373	Security Update for Microsoft Office Online Server and SharePoint Server 2010 Office Web Apps (July 2017)	Nessus	Windows : Microsoft Bulletins	high
101372	Security Update for Microsoft SharePoint Server and Project Server (July 2017)	Nessus	Windows : Microsoft Bulletins	high
101371	Security Update for Microsoft Office Products (July 2017)	Nessus	Windows : Microsoft Bulletins	high

Detections

Analytics

CVE-2017-0243

high

Tenable Plugins

high

high

high