Microsoft Office CVE-2017-0254 Memory Corruption Vulnerability

Bugtraq ID:	98101
Class:	Unknown
CVE:	CVE-2017-0254
Remote:	Yes
Local:	No
Published:	May 09 2017 12:00AM
Updated:	May 23 2017 04:23PM
Credit:	Yangkang(@dnpushme) & Liyadong & Wanglu of of 360 QEX Team.
Vulnerable:	Microsoft Word Viewer 0 Microsoft Word Automation Services on Microsoft SharePoint Server 2013 Service Pack 1 Microsoft Word Automation Services on Microsoft SharePoint Server 2010 SP2 0 Microsoft Word 2016 (64-bit edition) 0 Microsoft Word 2016 (32-bit edition) 0 Microsoft Word 2013 Service Pack 1 (64-bit editions) Microsoft Word 2013 Service Pack 1 (32-bit editions) Microsoft Word 2013 RT Service Pack 1 0 Microsoft Word 2010 Service Pack 2 (64-bit editions) 0 Microsoft Word 2010 Service Pack 2 (32-bit editions) 0 Microsoft Word 2007 Service Pack 3 0 Microsoft SharePoint Enterprise Server 2016 0 Microsoft Office Web Apps 2013 SP1 Microsoft Office Web Apps 2010 SP2 Microsoft Office for Mac 2011 Microsoft Office Compatibility Pack Service Pack 3 0 Microsoft Office 2010 Service Pack 2 (64-bit editions) 0 Microsoft Office 2010 Service Pack 2 (32-bit editions) 0
Not Vulnerable:

Microsoft Office CVE-2017-0254 Memory Corruption Vulnerability

Microsoft Office is prone to a remote memory-corruption vulnerability.

An attacker can leverage this issue to execute arbitrary code in the context of the currently logged-in user. Failed exploit attempts will likely result in denial of service conditions.

Microsoft Office CVE-2017-0254 Memory Corruption Vulnerability

Solution:
Updates are available. Please see the references or vendor advisory for more information.

Microsoft Office CVE-2017-0254 Memory Corruption Vulnerability

References:

• Microsoft Homepage (Microsoft)
  
• Microsoft Office Product Homepage (Microsoft)
  
• CVE-2017-0254 | Microsoft Office Memory Corruption Vulnerability (Microsoft)