CVE-2017-8567

HIGH

Microsoft Excel for Mac 2011 - Remote Code Execution via Memory Corruption

Title source: llm
STIX 2.1

Description

A remote code execution vulnerability exists in Microsoft Excel for Mac 2011 when it fails to properly handle objects in memory, aka "Microsoft Office Remote Code Execution".

References (3)

Core 3
Core References
Third Party Advisory, VDB Entry vdb-entry x_refsource_sectrack
http://www.securitytracker.com/id/1039315
Third Party Advisory, VDB Entry vdb-entry x_refsource_bid
http://www.securityfocus.com/bid/100719

Scores

CVSS v3 7.8
EPSS 0.3241
EPSS Percentile 96.9%
Attack Vector LOCAL
CVSS:3.0/AV:L/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H

Details

CWE
CWE-119
Status published
Products (2)
microsoft/excel_for_mac 2011
Microsoft Corporation/Microsoft Office Microsoft Excel for Mac 2011
Published Sep 13, 2017
Tracked Since Feb 18, 2026