Vulnerability Description
Microsoft Office 2013 RT SP1, Microsoft Office 2013 SP1, and Microsoft Office 2016 allow an information disclosure vulnerability due to the way certain functions handle objects in memory, aka "Microsoft Office Information Disclosure Vulnerability".
CVSS Score
MEDIUM
Affected Products
| Vendor | Product | Versions |
|---|---|---|
| Microsoft | Office | 2013 |
Related Weaknesses (CWE)
References
- http://www.securityfocus.com/bid/102064Third Party AdvisoryVDB Entry
- http://www.securitytracker.com/id/1039998Third Party AdvisoryVDB Entry
- https://portal.msrc.microsoft.com/en-US/security-guidance/advisory/CVE-2017-1193PatchVendor Advisory
- http://www.securityfocus.com/bid/102064Third Party AdvisoryVDB Entry
- http://www.securitytracker.com/id/1039998Third Party AdvisoryVDB Entry
- https://portal.msrc.microsoft.com/en-US/security-guidance/advisory/CVE-2017-1193PatchVendor Advisory
FAQ
What is CVE-2017-11934?
CVE-2017-11934 is a vulnerability with a CVSS score of 5.5 (MEDIUM). Microsoft Office 2013 RT SP1, Microsoft Office 2013 SP1, and Microsoft Office 2016 allow an information disclosure vulnerability due to the way certain functions handle objects in memory, aka "Microso...
How severe is CVE-2017-11934?
CVE-2017-11934 has been rated MEDIUM with a CVSS base score of 5.5/10. Review the CVSS metrics above for detailed severity breakdown.
Is there a patch for CVE-2017-11934?
Check the references section above for vendor advisories and patch information. Affected products include: Microsoft Office.