Microsoft Office 2010, Microsoft Office 2013, and Microsoft Office 2016 allow a remote code execution vulnerability due to the way RTF content is handled, aka "Microsoft Word Memory Corruption Vulnerability".
CVSS Details
- CVSS 3.1 Base Score: 7.8
- CVSS 3.0 Vector: (CVSS:3.0/AV:L/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H)
Covered by Rapid7
| Product | Vendor Advisory | Solution File | Added | Published |
|---|---|---|---|---|
| Microsoft Office | — | Download and install Microsoft KB4011643 | Jun 20, 2023 | Jan 10, 2018 |
| Microsoft Sharepoint | — | Download and install Microsoft KB4011642 | May 15, 2023 | Jan 10, 2018 |
| Msft | — | Security Update for Microsoft Web Applications (KB4011615) farm-deploymentSecurity Update for Word Viewer (KB4011641)Security Update for Microsoft Word 2010 (KB4011659) 32-Bit EditionSecurity Update for Microsoft Word 2010 (KB4011659) 64-Bit EditionSecurity Update for Microsoft Office Online Server (KB4011021) farm-deploymentSecurity Update for Microsoft Office Web Apps Server 2013 (KB4011648) farm-deploymentSecurity Update for Microsoft Office 2010 (KB4011658) 64-Bit EditionSecurity Update for Microsoft Office Online Server (KB4011022) farm-deploymentSecurity Update for Microsoft Office Word 2007 (KB4011657)Security Update for Microsoft Office Compatibility Pack Service Pack 3 (KB4011607)Security Update for Microsoft Office 2010 (KB4011658) 32-Bit EditionSecurity Update for Microsoft Word 2013 (KB4011651) 64-Bit EditionSecurity Update for Microsoft SharePoint Server 2010 (KB4011609)Security Update for Microsoft Office Web Apps Server 2013 (KB4011648)Security Update for Microsoft SharePoint Enterprise Server 2013 (KB4011579)Security Update for Microsoft Word 2013 (KB4011651) 32-Bit EditionSecurity Update for Microsoft Web Applications (KB4011615) | Jan 9, 2018 | Jan 9, 2018 |
| Office For Mac | — | Upgrade to Office for Mac version 16.9.0 | Jan 9, 2018 | Jan 9, 2018 |
Prioritise with Active Threat Intelligence
With curated Threat Intelligence, you can see which vulnerabilities truly put you at risk, prioritize what matters most, and act before attackers do.
Explore Intelligence Hub