Microsoft Office CVE-2017-0262 Remote Code Execution Vulnerability

Bugtraq ID:	98279
Class:	Unknown
CVE:	CVE-2017-0262
Remote:	Yes
Local:	No
Published:	May 09 2017 12:00AM
Updated:	Jul 12 2017 04:06PM
Credit:	Genwei Jiang of FireEye, Inc.
Vulnerable:	Microsoft Office 2016 (64-bit edition) 0 Microsoft Office 2016 (32-bit edition) 0 Microsoft Office 2013 Service Pack 1 (64-bit editions) Microsoft Office 2013 Service Pack 1 (32-bit editions) Microsoft Office 2013 RT Service Pack 1 0 Microsoft Office 2010 Service Pack 2 (64-bit editions) 0 Microsoft Office 2010 Service Pack 2 (32-bit editions) 0
Not Vulnerable:

Microsoft Office CVE-2017-0262 Remote Code Execution Vulnerability

Microsoft Office is prone to a remote code-execution vulnerability.

An attacker can leverage this issue to execute arbitrary code in the context of the affected application. Failed exploit attempts will likely result in denial-of-service conditions.

Microsoft Office CVE-2017-0262 Remote Code Execution Vulnerability

Reports indicate that this issue is being exploited in the wild.

This vulnerability is being exploited as part of the cyber espionage campaign identified in SYMC MATI report - 300622.

Microsoft Office CVE-2017-0262 Remote Code Execution Vulnerability

Solution:
Updates are available. Please see the references or vendor advisory for more information.

Microsoft Office CVE-2017-0262 Remote Code Execution Vulnerability

References:

• Microsoft Homepage (Microsoft)
  
• Microsoft Office Product Homepage (Microsoft)
  
• Coming together to address Encapsulated PostScript (EPS) attacks (Microsoft)
  
• CVE-2017-0262 | Microsoft Office Remote Code Execution Vulnerability (Microsoft)