Skip to content
Appaloosa Scout
Language selector
fr en

Vulnerability · NVD

CVE-2017-0030

CVE-2017-0030, high severity (CVSS 7.8): 3 tracked apps concerned, all fixed or indeterminable on their current version.

Severity (CVSS)
7.8

NVD scale

Exploitation
26.0 %

EPSS, predicted over 30 days

Tracked apps
3
Still exposed
0

Microsoft Office 2010 SP2, Office Compatibility Pack SP3, Office Web Apps Server 2010 SP2, Word 2007 SP3, Word 2010 SP2, and Word Automation Services on SharePoint Server 2010 SP2 allow remote attackers to execute arbitrary code or cause a denial of service (memory corruption) via a crafted document, aka "Microsoft Office Memory Corruption Vulnerability." This vulnerability is different from those described in CVE-2017-0006, CVE-2017-0019, CVE-2017-0020, CVE-2017-0031, CVE-2017-0052, and CVE-2017-0053.

Attack vector : Local No privileges required
Show raw CVSS vector
CVSS:3.0/AV:L/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H
EPSS 25.99% moderate exploit risk percentile 97.8%

Tracked apps referencing this CVE

For each app: the affected range, the fixing version, and where the tracked app stands today.

Vulnerable CPE configurations (6)
Vendor Product Versions
microsoft office
All platforms (wildcard)
-
microsoft office
All platforms (wildcard)
-
microsoft word
All platforms (wildcard)
-
microsoft word
All platforms (wildcard)
-
microsoft word
All platforms (wildcard)
-
microsoft word
All platforms (wildcard)
-
View on NVD ↗ Advisory · portal.msrc.microsoft.com