Microsoft Office CVE-2017-11876 Cross Site Request Forgery Vulnerability

Bugtraq ID:	101754
Class:	Unknown
CVE:	CVE-2017-11876
Remote:	Yes
Local:	No
Published:	Nov 14 2017 12:00AM
Updated:	Dec 19 2017 10:37PM
Credit:	The vendor reported this issue.
Vulnerable:	Microsoft SharePoint Enterprise Server 2016 0 Microsoft Project Server 2013 Service Pack 1
Not Vulnerable:

Microsoft Office CVE-2017-11876 Cross Site Request Forgery Vulnerability

Microsoft Office is prone to a cross-site request-forgery vulnerability.

Exploiting this issue may allow a remote attacker to perform certain unauthorized actions in the context of the affected application. Other attacks are also possible.

Microsoft Office CVE-2017-11876 Cross Site Request Forgery Vulnerability

Currently, we are not aware of any working exploits. If you feel we are in error or if you are aware of more recent information, please mail us at: [email protected].

Microsoft Office CVE-2017-11876 Cross Site Request Forgery Vulnerability

Solution:
Updates are available. Please see the references or vendor advisory for more information.

Microsoft Office CVE-2017-11876 Cross Site Request Forgery Vulnerability

References:

• Microsoft Homepage (Microsoft)
  
• Microsoft Office Homepage (Microsoft)
  
• CVE-2017-11876 | Microsoft Project Server Elevation of Privilege Vulnerability (Microsoft)