VYPR
High severity7.8CISA KEVNVD Advisory· Published Apr 12, 2017· Updated Apr 22, 2026

CVE-2017-0199

CVE-2017-0199

Description

Microsoft Office 2007 SP3, Microsoft Office 2010 SP2, Microsoft Office 2013 SP1, Microsoft Office 2016, Microsoft Windows Vista SP2, Windows Server 2008 SP2, Windows 7 SP1, Windows 8.1 allow remote attackers to execute arbitrary code via a crafted document, aka "Microsoft Office/WordPad Remote Code Execution Vulnerability w/Windows API."

Affected products

11
  • Microsoft/Office4 versions
    cpe:2.3:a:microsoft:office:2007:sp3:*:*:*:*:*:*+ 3 more
    • cpe:2.3:a:microsoft:office:2007:sp3:*:*:*:*:*:*
    • cpe:2.3:a:microsoft:office:2010:sp2:*:*:*:*:*:*
    • cpe:2.3:a:microsoft:office:2013:sp1:*:*:*:*:*:*
    • cpe:2.3:a:microsoft:office:2016:-:*:*:*:*:*:*
  • cpe:2.3:a:philips:intellispace_portal:7.0:*:*:*:*:*:*:*+ 1 more
    • cpe:2.3:a:philips:intellispace_portal:7.0:*:*:*:*:*:*:*
    • cpe:2.3:a:philips:intellispace_portal:8.0:*:*:*:*:*:*:*
  • cpe:2.3:o:microsoft:windows_7:-:sp1:*:*:*:*:*:*
  • cpe:2.3:o:microsoft:windows_server_2008:r2:sp1:*:*:*:*:*:*+ 1 more
    • cpe:2.3:o:microsoft:windows_server_2008:r2:sp1:*:*:*:*:*:*
    • cpe:2.3:o:microsoft:windows_server_2008:-:sp2:*:*:*:*:*:*
  • cpe:2.3:o:microsoft:windows_server_2012:-:*:*:*:*:*:*:*
  • cpe:2.3:o:microsoft:windows_vista:-:sp2:*:*:*:*:*:*

Patches

0

No patches discovered yet.

Vulnerability mechanics

AI mechanics synthesis has not run for this CVE yet.

References

12

News mentions

0

No linked articles in our index yet.