Actively exploited · Published Oct 13, 2017 · Assigned by microsoft
CVE-2017-11774
High 7.8 Exploited
In plain English
A high-severity memory corruption in Microsoft Outlook from Microsoft Corporation. Attackers are actively exploiting it in the wild (listed by CISA on November 3, 2021). The chance it is exploited in the next 30 days is estimated at 59.6% (higher than 99.1% of all known vulnerabilities). Ready-made attack tooling exists: public proof-of-concept code. Apply updates per vendor instructions.
CISA guidance
Apply updates per vendor instructions.
Federal agencies must remediate by May 3, 2022.
Official description
Microsoft Outlook 2010 SP2, Outlook 2013 SP1 and RT SP1, and Outlook 2016 allow an attacker to execute arbitrary commands, due to how Microsoft Office handles objects in memory, aka "Microsoft Outlook Security Feature Bypass Vulnerability."
Affected products (as reported)
| Vendor | Product | Versions |
|---|---|---|
| Microsoft Corporation | Microsoft Outlook | Microsoft Outlook 2010 SP2Outlook 2013 SP1 and RT SP1Outlook 2016 |
Weakness: CWE-119 · Vector: CVSS:3.1/AV:L/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H
References
- https://portal.msrc.microsoft.com/en-US/security-guidance/advisory/CVE-2017-11774 x_refsource_CONFIRM
- 101098 vdb-entry, x_refsource_BID
- 1039542 vdb-entry, x_refsource_SECTRACK
- https://sensepost.com/blog/2017/outlook-home-page-another-ruler-vector/ x_refsource_MISC
- https://www.cisa.gov/known-exploited-vulnerabilities-catalog?field_cve=CVE-2017-11774 government-resource