VYPR
← All advisories
Medium severity5.5NVD Advisory· Published Apr 12, 2017· Updated Jun 17, 2026

CVE-2017-0194

CVE-2017-0194

Description

Microsoft Excel 2007 SP3, Microsoft Excel 2010 SP2, and Office Compatibility Pack SP2 allow remote attackers to obtain sensitive information from process memory via a crafted Office document, aka "Microsoft Office Information Disclosure Vulnerability."

Affected products

6
  • Microsoft/Excel3 versions
    cpe:2.3:a:microsoft:excel:2007:sp3:*:*:*:*:*:*+ 2 more
    • cpe:2.3:a:microsoft:excel:2007:sp3:*:*:*:*:*:*
    • cpe:2.3:a:microsoft:excel:2010:sp2:*:*:*:*:*:*
    • (no CPE)range: 2007 SP3, 2010 SP2
  • Microsoft/Office Compatibility Pack2 versions
    cpe:2.3:a:microsoft:office_compatibility_pack:*:sp2:*:*:*:*:*:*+ 1 more
    • cpe:2.3:a:microsoft:office_compatibility_pack:*:sp2:*:*:*:*:*:*
    • (no CPE)range: SP2
  • Microsoft/Officev5
    Range: Excel 2007 SP3, Microsoft Excel 2010 SP2, and Office Compatibility Pack SP2

Patches

Vulnerability mechanics

References

3

News mentions

0

No linked articles in our index yet.