Exploitation Summary
CVE-2017-11774 is actively exploited and listed in the CISA Known Exploited Vulnerabilities (KEV) catalog, added November 3, 2021. EIP tracks 1 public exploit from researchers including devcoinfet.
AI-analyzed exploit summary This repository contains a PoC exploit for CVE-2017-11774, which targets a vulnerability in Microsoft Outlook. The exploit generates a malicious homepage vector and uses the 'ruler' tool to execute commands, potentially leading to remote code execution (RCE).
Description
Microsoft Outlook 2010 SP2, Outlook 2013 SP1 and RT SP1, and Outlook 2016 allow an attacker to execute arbitrary commands, due to how Microsoft Office handles objects in memory, aka "Microsoft Outlook Security Feature Bypass Vulnerability."
Exploits (1)
This repository contains a PoC exploit for CVE-2017-11774, which targets a vulnerability in Microsoft Outlook. The exploit generates a malicious homepage vector and uses the 'ruler' tool to execute commands, potentially leading to remote code execution (RCE).
References (5)
Scores
CVSS:3.1/AV:L/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H