Vulnerability · NVD
CVE-2017-0020
CVE-2017-0020, high severity (CVSS 7.8): 2 tracked apps concerned, all fixed or indeterminable on their current version.
- Severity (CVSS)
- 7.8
- Exploitation
- 16.4 %
- Tracked apps
- 2
- Still exposed
- 0
NVD scale
EPSS, predicted over 30 days
Microsoft Excel 2016, Excel 2010 SP2, Excel 2013 RT SP1, and Office Web Apps Server 2013 SP1 allow remote attackers to execute arbitrary code or cause a denial of service (memory corruption) via a crafted document, aka "Microsoft Office Memory Corruption Vulnerability." This vulnerability is different from those described in CVE-2017-0006, CVE-2017-0019, CVE-2017-0030, CVE-2017-0031, CVE-2017-0052, and CVE-2017-0053.
Attack vector : Local
No privileges required
Show raw CVSS vector
CVSS:3.0/AV:L/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H
EPSS
16.39%
moderate exploit risk
percentile 96.7%
Tracked apps referencing this CVE
For each app: the affected range, the fixing version, and where the tracked app stands today.
-
-
Affected - Fixed in - Latest tracked - undetermined
Vulnerable CPE configurations (6)
| Vendor | Product | Platform | Versions | CPE 2.3 URI |
|---|---|---|---|---|
| microsoft |
excel All platforms (wildcard)
|
All platforms (wildcard) | - | cpe:2.3:a:microsoft:excel:2010:sp2:*:*:*:*:*:* |
| microsoft |
excel All platforms (wildcard)
|
All platforms (wildcard) | - | cpe:2.3:a:microsoft:excel:2010:sp2:*:*:*:*:*:* |
| microsoft |
excel All platforms (wildcard)
|
All platforms (wildcard) | - | cpe:2.3:a:microsoft:excel:2013:sp1:*:*:rt:*:*:* |
| microsoft |
excel All platforms (wildcard)
|
All platforms (wildcard) | - | cpe:2.3:a:microsoft:excel:2013:sp1:*:*:rt:*:*:* |
| microsoft |
excel All platforms (wildcard)
|
All platforms (wildcard) | - | cpe:2.3:a:microsoft:excel:2016:*:*:*:*:*:*:* |
| microsoft |
excel All platforms (wildcard)
|
All platforms (wildcard) | - | cpe:2.3:a:microsoft:excel:2016:*:*:*:*:*:*:* |