CVE-2017-0199 — Microsoft Office and WordPad Remote Code Execution Vulnerability
CVE-2017-0199: Microsoft Office and WordPad Remote Code Execution Vulnerability
CISA Known Exploited Vulnerability (KEV)
| Vendor / project | Microsoft |
| Product | Office and WordPad |
| Date added | 2021-11-03 |
| Due date | 2022-05-03 |
| Ransomware campaign use | Known |
Description
Microsoft Office and WordPad contain an unspecified vulnerability due to the way the applications parse specially crafted files. Successful exploitation allows for remote code execution.
Required action (CISA)
Apply updates per vendor instructions.
Notes
https://nvd.nist.gov/vuln/detail/CVE-2017-0199
References
- NVD: https://nvd.nist.gov/vuln/detail/CVE-2017-0199
- KEV catalog: https://www.cisa.gov/known-exploited-vulnerabilities-catalog