CVE-2017-11774High

Microsoft Outlook Security Feature Bypass Vulnerability

Published
October 10, 2017
Last Modified
—

🔗 CVE IDs covered (1)

CVE-2017-11774 →

📋 Description

A security feature bypass vulnerability exists when Microsoft Outlook improperly handles objects in memory. An attacker who successfully exploited the vulnerability could execute arbitrary commands. In a file-sharing attack scenario, an attacker could provide a specially crafted document file designed to exploit the vulnerability, and then convince users to open the document file and interact with the document. The security update addresses the vulnerability by correcting how Microsoft Outlook handles objects in memory.

🎯 Affected products7

  • Microsoft Outlook 2010 Service Pack 2 (32-bit editions)
  • Microsoft Outlook 2010 Service Pack 2 (64-bit editions)
  • Microsoft Outlook 2013 RT Service Pack 1
  • Microsoft Outlook 2013 Service Pack 1 (32-bit editions)
  • Microsoft Outlook 2013 Service Pack 1 (64-bit editions)
  • Microsoft Outlook 2016 (32-bit edition)
  • Microsoft Outlook 2016 (64-bit edition)

✅ Remediation

KB4011162 (Security Update) KB4011178 (Security Update) KB4011196 (Security Update)

🔗 References (4)