Microsoft Office Memory Corruption Vulnerability

Description

References

• reversingminds-blog.logdown.com/posts/3907313-fileless-attack-in-word-without-macros-cve-2017-11882 · Exploit
• securityfocus.com/bid/101757 · Third Party Advisory
• securitytracker.com/id/1039783 · Third Party Advisory
• 0patch.blogspot.com/2017/11/did-microsoft-just-manually-patch-their.html · Exploit
• 0patch.blogspot.com/2017/11/official-patch-for-cve-2017-11882-meets.html · Exploit
• 0x09AL/CVE-2017-11882-metasploit · Exploit
• embedi/CVE-2017-11882 · Exploit
• rxwx/CVE-2017-11882 · Exploit
• unamer/CVE-2017-11882 · Exploit
• portal.msrc.microsoft.com/en-US/security-guidance/advisory/CVE-2017-11882 · Patch
• researchcenter.paloaltonetworks.com/2017/12/unit42-analysis-of-cve-2017-11882-exploit-in-the-wild

Autres vulnérabilités de office

• CVE-2026-70105ÉLEVÉE 7.5Improper input validation in Microsoft Office Word allows an unauthorized attacker to disclose information over a network.
• CVE-2026-55054MOYENNE 6.5Out-of-bounds read in Microsoft Office Excel allows an unauthorized attacker to disclose information over a network.
• CVE-2026-47293ÉLEVÉE 7.0Use after free in Microsoft Office Click-To-Run allows an authorized attacker to elevate privileges locally.
• CVE-2026-42832MOYENNE 5.5Improper access control in Microsoft Office allows an unauthorized attacker to perform spoofing locally.
• CVE-2026-42831ÉLEVÉE 7.8Heap-based buffer overflow in Microsoft Office allows an unauthorized attacker to execute code locally.