CVE-2017-8570 - Vulnerability Details - OpenCVE

Microsoft Office allows a remote code execution vulnerability due to the way that it handles objects in memory, aka "Microsoft Office Remote Code Execution Vulnerability". This CVE ID is unique from CVE-2017-0243.

No CVSS v4.0

Attack Vector Local

Attack Complexity Low

Privileges Required None

Scope Unchanged

Confidentiality Impact High

Integrity Impact High

Availability Impact High

User Interaction Required

No CVSS v3.0

Access Vector Network

Access Complexity Medium

Authentication None

Confidentiality Impact Complete

Integrity Impact Complete

Availability Impact Complete

This CVE is in the KEV database since Feb. 25, 2022.

Exploitation active

Automatable no

Technical Impact total

Vendors	Products
Microsoft	Office

Configuration 1 [-]

OR	cpe:2.3:a:microsoft:office:2007:sp3::::::
	cpe:2.3:a:microsoft:office:2010:sp2::::::
	cpe:2.3:a:microsoft:office:2013:sp1::::::
	cpe:2.3:a:microsoft:office:2013:sp1:::rt:::*
	cpe:2.3:a:microsoft:office:2016::::::x64:
	cpe:2.3:a:microsoft:office:2016::::::x86:

No data.

References

Link	Providers
http://www.securityfocus.com/bid/99445
https://github.com/ParsingTeam/ppsx-file-generator
https://github.com/rxwx/CVE-2017-8570
https://github.com/tezukanice/Office8570
https://portal.msrc.microsoft.com/en-us/security-guidance/advisory/CVE-2017-8570

History

Fri, 04 Apr 2025 20:15:00 +0000

Type	Values Removed	Values Added
CPEs	cpe:2.3:a:microsoft:office:2016:::::::*	cpe:2.3:a:microsoft:office:2016::::::x64: cpe:2.3:a:microsoft:office:2016::::::x86:
Metrics	cvssV3_0 `{'score': 7.8, 'vector': 'CVSS:3.0/AV:L/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H'}`

Mon, 10 Feb 2025 15:15:00 +0000

Type	Values Removed	Values Added
Metrics		cvssV3_1 `{'score': 7.8, 'vector': 'CVSS:3.1/AV:L/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H'}` kev `{'dateAdded': '2022-02-25'}` ssvc `{'options': {'Automatable': 'no', 'Exploitation': 'active', 'Technical Impact': 'total'}, 'version': '2.0.3'}`

MITRE

Status: PUBLISHED

Assigner: microsoft

Published: 2017-07-11T21:00:00.000Z

Updated: 2025-02-10T14:50:33.274Z

Reserved: 2017-05-03T00:00:00.000Z

Link: CVE-2017-8570

Vulnrichment

Updated: 2024-08-05T16:41:23.725Z

NVD

Status : Deferred

Published: 2017-07-11T21:29:01.267

Modified: 2025-04-20T01:37:25.860

Link: CVE-2017-8570

Redhat

No data.

{"containers": {"cna": {"affected": [{"product": "Microsoft Office 2007 SP3, Microsoft Office 2010 SP2, Microsoft Office 2013 SP1, and Microsoft Office 2016.", "vendor": "Microsoft Corporation", "versions": [{"status": "affected", "version": "Microsoft Office"}]}], "datePublic": "2017-07-11T00:00:00.000Z", "descriptions": [{"lang": "en", "value": "Microsoft Office allows a remote code execution vulnerability due to the way that it handles objects in memory, aka \"Microsoft Office Remote Code Execution Vulnerability\". This CVE ID is unique from CVE-2017-0243."}], "problemTypes": [{"descriptions": [{"description": "Remote Code Execution", "lang": "en", "type": "text"}]}], "providerMetadata": {"dateUpdated": "2018-03-04T19:57:01.000Z", "orgId": "f38d906d-7342-40ea-92c1-6c4a2c6478c8", "shortName": "microsoft"}, "references": [{"name": "99445", "tags": ["vdb-entry", "x_refsource_BID"], "url": "http://www.securityfocus.com/bid/99445"}, {"tags": ["x_refsource_MISC"], "url": "https://github.com/rxwx/CVE-2017-8570"}, {"tags": ["x_refsource_MISC"], "url": "https://github.com/tezukanice/Office8570"}, {"tags": ["x_refsource_CONFIRM"], "url": "https://portal.msrc.microsoft.com/en-us/security-guidance/advisory/CVE-2017-8570"}, {"tags": ["x_refsource_MISC"], "url": "https://github.com/ParsingTeam/ppsx-file-generator"}], "x_legacyV4Record": {"CVE_data_meta": {"ASSIGNER": "[email protected]", "DATE_PUBLIC": "2017-07-11T00:00:00", "ID": "CVE-2017-8570", "STATE": "PUBLIC"}, "affects": {"vendor": {"vendor_data": [{"product": {"product_data": [{"product_name": "Microsoft Office 2007 SP3, Microsoft Office 2010 SP2, Microsoft Office 2013 SP1, and Microsoft Office 2016.", "version": {"version_data": [{"version_value": "Microsoft Office"}]}}]}, "vendor_name": "Microsoft Corporation"}]}}, "data_format": "MITRE", "data_type": "CVE", "data_version": "4.0", "description": {"description_data": [{"lang": "eng", "value": "Microsoft Office allows a remote code execution vulnerability due to the way that it handles objects in memory, aka \"Microsoft Office Remote Code Execution Vulnerability\". This CVE ID is unique from CVE-2017-0243."}]}, "problemtype": {"problemtype_data": [{"description": [{"lang": "eng", "value": "Remote Code Execution"}]}]}, "references": {"reference_data": [{"name": "99445", "refsource": "BID", "url": "http://www.securityfocus.com/bid/99445"}, {"name": "https://github.com/rxwx/CVE-2017-8570", "refsource": "MISC", "url": "https://github.com/rxwx/CVE-2017-8570"}, {"name": "https://github.com/tezukanice/Office8570", "refsource": "MISC", "url": "https://github.com/tezukanice/Office8570"}, {"name": "https://portal.msrc.microsoft.com/en-us/security-guidance/advisory/CVE-2017-8570", "refsource": "CONFIRM", "url": "https://portal.msrc.microsoft.com/en-us/security-guidance/advisory/CVE-2017-8570"}, {"name": "https://github.com/ParsingTeam/ppsx-file-generator", "refsource": "MISC", "url": "https://github.com/ParsingTeam/ppsx-file-generator"}]}}}, "adp": [{"providerMetadata": {"orgId": "af854a3a-2127-422b-91ae-364da2661108", "shortName": "CVE", "dateUpdated": "2024-08-05T16:41:23.725Z"}, "title": "CVE Program Container", "references": [{"name": "99445", "tags": ["vdb-entry", "x_refsource_BID", "x_transferred"], "url": "http://www.securityfocus.com/bid/99445"}, {"tags": ["x_refsource_MISC", "x_transferred"], "url": "https://github.com/rxwx/CVE-2017-8570"}, {"tags": ["x_refsource_MISC", "x_transferred"], "url": "https://github.com/tezukanice/Office8570"}, {"tags": ["x_refsource_CONFIRM", "x_transferred"], "url": "https://portal.msrc.microsoft.com/en-us/security-guidance/advisory/CVE-2017-8570"}, {"tags": ["x_refsource_MISC", "x_transferred"], "url": "https://github.com/ParsingTeam/ppsx-file-generator"}]}, {"problemTypes": [{"descriptions": [{"type": "CWE", "lang": "en", "description": "CWE-noinfo Not enough information"}]}], "metrics": [{"cvssV3_1": {"scope": "UNCHANGED", "version": "3.1", "baseScore": 7.8, "attackVector": "LOCAL", "baseSeverity": "HIGH", "vectorString": "CVSS:3.1/AV:L/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H", "integrityImpact": "HIGH", "userInteraction": "REQUIRED", "attackComplexity": "LOW", "availabilityImpact": "HIGH", "privilegesRequired": "NONE", "confidentialityImpact": "HIGH"}}, {"other": {"type": "ssvc", "content": {"timestamp": "2025-02-10T14:50:10.277536Z", "id": "CVE-2017-8570", "options": [{"Exploitation": "active"}, {"Automatable": "no"}, {"Technical Impact": "total"}], "role": "CISA Coordinator", "version": "2.0.3"}}}, {"other": {"type": "kev", "content": {"dateAdded": "2022-02-25", "reference": "https://www.cisa.gov/known-exploited-vulnerabilities-catalog?search_api_fulltext=CVE-2017-8570"}}}], "title": "CISA ADP Vulnrichment", "providerMetadata": {"orgId": "134c704f-9b21-4f2e-91b3-4a467353bcc0", "shortName": "CISA-ADP", "dateUpdated": "2025-02-10T14:50:33.274Z"}}]}, "cveMetadata": {"assignerOrgId": "f38d906d-7342-40ea-92c1-6c4a2c6478c8", "assignerShortName": "microsoft", "cveId": "CVE-2017-8570", "datePublished": "2017-07-11T21:00:00.000Z", "dateReserved": "2017-05-03T00:00:00.000Z", "dateUpdated": "2025-02-10T14:50:33.274Z", "state": "PUBLISHED"}, "dataType": "CVE_RECORD", "dataVersion": "5.1"}

{"dataType": "CVE_RECORD", "containers": {"adp": [{"title": "CVE Program Container", "references": [{"url": "http://www.securityfocus.com/bid/99445", "name": "99445", "tags": ["vdb-entry", "x_refsource_BID", "x_transferred"]}, {"url": "https://github.com/rxwx/CVE-2017-8570", "tags": ["x_refsource_MISC", "x_transferred"]}, {"url": "https://github.com/tezukanice/Office8570", "tags": ["x_refsource_MISC", "x_transferred"]}, {"url": "https://portal.msrc.microsoft.com/en-us/security-guidance/advisory/CVE-2017-8570", "tags": ["x_refsource_CONFIRM", "x_transferred"]}, {"url": "https://github.com/ParsingTeam/ppsx-file-generator", "tags": ["x_refsource_MISC", "x_transferred"]}], "providerMetadata": {"orgId": "af854a3a-2127-422b-91ae-364da2661108", "shortName": "CVE", "dateUpdated": "2024-08-05T16:41:23.725Z"}}, {"title": "CISA ADP Vulnrichment", "metrics": [{"cvssV3_1": {"scope": "UNCHANGED", "version": "3.1", "baseScore": 7.8, "attackVector": "LOCAL", "baseSeverity": "HIGH", "vectorString": "CVSS:3.1/AV:L/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H", "integrityImpact": "HIGH", "userInteraction": "REQUIRED", "attackComplexity": "LOW", "availabilityImpact": "HIGH", "privilegesRequired": "NONE", "confidentialityImpact": "HIGH"}}, {"other": {"type": "ssvc", "content": {"id": "CVE-2017-8570", "role": "CISA Coordinator", "options": [{"Exploitation": "active"}, {"Automatable": "no"}, {"Technical Impact": "total"}], "version": "2.0.3", "timestamp": "2025-02-10T14:50:10.277536Z"}}}, {"other": {"type": "kev", "content": {"dateAdded": "2022-02-25", "reference": "https://www.cisa.gov/known-exploited-vulnerabilities-catalog?search_api_fulltext=CVE-2017-8570"}}}], "problemTypes": [{"descriptions": [{"lang": "en", "type": "CWE", "description": "CWE-noinfo Not enough information"}]}], "providerMetadata": {"orgId": "134c704f-9b21-4f2e-91b3-4a467353bcc0", "shortName": "CISA-ADP", "dateUpdated": "2025-02-10T14:48:55.380Z"}}], "cna": {"affected": [{"vendor": "Microsoft Corporation", "product": "Microsoft Office 2007 SP3, Microsoft Office 2010 SP2, Microsoft Office 2013 SP1, and Microsoft Office 2016.", "versions": [{"status": "affected", "version": "Microsoft Office"}]}], "datePublic": "2017-07-11T00:00:00.000Z", "references": [{"url": "http://www.securityfocus.com/bid/99445", "name": "99445", "tags": ["vdb-entry", "x_refsource_BID"]}, {"url": "https://github.com/rxwx/CVE-2017-8570", "tags": ["x_refsource_MISC"]}, {"url": "https://github.com/tezukanice/Office8570", "tags": ["x_refsource_MISC"]}, {"url": "https://portal.msrc.microsoft.com/en-us/security-guidance/advisory/CVE-2017-8570", "tags": ["x_refsource_CONFIRM"]}, {"url": "https://github.com/ParsingTeam/ppsx-file-generator", "tags": ["x_refsource_MISC"]}], "descriptions": [{"lang": "en", "value": "Microsoft Office allows a remote code execution vulnerability due to the way that it handles objects in memory, aka \"Microsoft Office Remote Code Execution Vulnerability\". This CVE ID is unique from CVE-2017-0243."}], "problemTypes": [{"descriptions": [{"lang": "en", "type": "text", "description": "Remote Code Execution"}]}], "providerMetadata": {"orgId": "f38d906d-7342-40ea-92c1-6c4a2c6478c8", "shortName": "microsoft", "dateUpdated": "2018-03-04T19:57:01.000Z"}, "x_legacyV4Record": {"affects": {"vendor": {"vendor_data": [{"product": {"product_data": [{"version": {"version_data": [{"version_value": "Microsoft Office"}]}, "product_name": "Microsoft Office 2007 SP3, Microsoft Office 2010 SP2, Microsoft Office 2013 SP1, and Microsoft Office 2016."}]}, "vendor_name": "Microsoft Corporation"}]}}, "data_type": "CVE", "references": {"reference_data": [{"url": "http://www.securityfocus.com/bid/99445", "name": "99445", "refsource": "BID"}, {"url": "https://github.com/rxwx/CVE-2017-8570", "name": "https://github.com/rxwx/CVE-2017-8570", "refsource": "MISC"}, {"url": "https://github.com/tezukanice/Office8570", "name": "https://github.com/tezukanice/Office8570", "refsource": "MISC"}, {"url": "https://portal.msrc.microsoft.com/en-us/security-guidance/advisory/CVE-2017-8570", "name": "https://portal.msrc.microsoft.com/en-us/security-guidance/advisory/CVE-2017-8570", "refsource": "CONFIRM"}, {"url": "https://github.com/ParsingTeam/ppsx-file-generator", "name": "https://github.com/ParsingTeam/ppsx-file-generator", "refsource": "MISC"}]}, "data_format": "MITRE", "description": {"description_data": [{"lang": "eng", "value": "Microsoft Office allows a remote code execution vulnerability due to the way that it handles objects in memory, aka \"Microsoft Office Remote Code Execution Vulnerability\". This CVE ID is unique from CVE-2017-0243."}]}, "problemtype": {"problemtype_data": [{"description": [{"lang": "eng", "value": "Remote Code Execution"}]}]}, "data_version": "4.0", "CVE_data_meta": {"ID": "CVE-2017-8570", "STATE": "PUBLIC", "ASSIGNER": "[email protected]", "DATE_PUBLIC": "2017-07-11T00:00:00"}}}}, "cveMetadata": {"cveId": "CVE-2017-8570", "state": "PUBLISHED", "dateUpdated": "2025-02-10T14:50:33.274Z", "dateReserved": "2017-05-03T00:00:00.000Z", "assignerOrgId": "f38d906d-7342-40ea-92c1-6c4a2c6478c8", "datePublished": "2017-07-11T21:00:00.000Z", "assignerShortName": "microsoft"}, "dataVersion": "5.1"}

{"cisaActionDue": "2022-08-25", "cisaExploitAdd": "2022-02-25", "cisaRequiredAction": "Apply updates per vendor instructions.", "cisaVulnerabilityName": "Microsoft Office Remote Code Execution Vulnerability", "configurations": [{"nodes": [{"cpeMatch": [{"criteria": "cpe:2.3:a:microsoft:office:2007:sp3:*:*:*:*:*:*", "matchCriteriaId": "FEECD12A-5BEF-4675-B62E-86CF4A7474D7", "vulnerable": true}, {"criteria": "cpe:2.3:a:microsoft:office:2010:sp2:*:*:*:*:*:*", "matchCriteriaId": "081DE1E3-4622-4C32-8B9C-9AEC1CD20638", "vulnerable": true}, {"criteria": "cpe:2.3:a:microsoft:office:2013:sp1:*:*:*:*:*:*", "matchCriteriaId": "120690A6-E0A1-4E36-A35A-C87109ECC064", "vulnerable": true}, {"criteria": "cpe:2.3:a:microsoft:office:2013:sp1:*:*:rt:*:*:*", "matchCriteriaId": "F7DDFFB8-2337-4DD7-8120-56CC8EF134B4", "vulnerable": true}, {"criteria": "cpe:2.3:a:microsoft:office:2016:*:*:*:*:*:x64:*", "matchCriteriaId": "72324216-4EB3-4243-A007-FEF3133C7DF9", "vulnerable": true}, {"criteria": "cpe:2.3:a:microsoft:office:2016:*:*:*:*:*:x86:*", "matchCriteriaId": "0FBB0E61-7997-4F26-9C07-54912D3F1C10", "vulnerable": true}], "negate": false, "operator": "OR"}]}], "cveTags": [], "descriptions": [{"lang": "en", "value": "Microsoft Office allows a remote code execution vulnerability due to the way that it handles objects in memory, aka \"Microsoft Office Remote Code Execution Vulnerability\". This CVE ID is unique from CVE-2017-0243."}, {"lang": "es", "value": "Microsoft Office permite una vulnerabilidad de ejecuci\u00f3n remota de c\u00f3digo debido a la forma en la que gestiona los objetos en la memoria. Esto tambi\u00e9n se conoce como \"Microsoft Office Remote Code Execution Vulnerability\". El ID de este CVE es diferente de CVE-2017-0243."}], "id": "CVE-2017-8570", "lastModified": "2025-04-20T01:37:25.860", "metrics": {"cvssMetricV2": [{"acInsufInfo": false, "baseSeverity": "HIGH", "cvssData": {"accessComplexity": "MEDIUM", "accessVector": "NETWORK", "authentication": "NONE", "availabilityImpact": "COMPLETE", "baseScore": 9.3, "confidentialityImpact": "COMPLETE", "integrityImpact": "COMPLETE", "vectorString": "AV:N/AC:M/Au:N/C:C/I:C/A:C", "version": "2.0"}, "exploitabilityScore": 8.6, "impactScore": 10.0, "obtainAllPrivilege": false, "obtainOtherPrivilege": false, "obtainUserPrivilege": false, "source": "[email protected]", "type": "Primary", "userInteractionRequired": true}], "cvssMetricV31": [{"cvssData": {"attackComplexity": "LOW", "attackVector": "LOCAL", "availabilityImpact": "HIGH", "baseScore": 7.8, "baseSeverity": "HIGH", "confidentialityImpact": "HIGH", "integrityImpact": "HIGH", "privilegesRequired": "NONE", "scope": "UNCHANGED", "userInteraction": "REQUIRED", "vectorString": "CVSS:3.1/AV:L/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H", "version": "3.1"}, "exploitabilityScore": 1.8, "impactScore": 5.9, "source": "[email protected]", "type": "Primary"}, {"cvssData": {"attackComplexity": "LOW", "attackVector": "LOCAL", "availabilityImpact": "HIGH", "baseScore": 7.8, "baseSeverity": "HIGH", "confidentialityImpact": "HIGH", "integrityImpact": "HIGH", "privilegesRequired": "NONE", "scope": "UNCHANGED", "userInteraction": "REQUIRED", "vectorString": "CVSS:3.1/AV:L/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H", "version": "3.1"}, "exploitabilityScore": 1.8, "impactScore": 5.9, "source": "134c704f-9b21-4f2e-91b3-4a467353bcc0", "type": "Secondary"}]}, "published": "2017-07-11T21:29:01.267", "references": [{"source": "[email protected]", "tags": ["Broken Link", "Third Party Advisory", "VDB Entry"], "url": "http://www.securityfocus.com/bid/99445"}, {"source": "[email protected]", "tags": ["Exploit", "Third Party Advisory"], "url": "https://github.com/ParsingTeam/ppsx-file-generator"}, {"source": "[email protected]", "tags": ["Third Party Advisory"], "url": "https://github.com/rxwx/CVE-2017-8570"}, {"source": "[email protected]", "tags": ["Exploit", "Third Party Advisory"], "url": "https://github.com/tezukanice/Office8570"}, {"source": "[email protected]", "tags": ["Patch", "Vendor Advisory"], "url": "https://portal.msrc.microsoft.com/en-us/security-guidance/advisory/CVE-2017-8570"}, {"source": "af854a3a-2127-422b-91ae-364da2661108", "tags": ["Broken Link", "Third Party Advisory", "VDB Entry"], "url": "http://www.securityfocus.com/bid/99445"}, {"source": "af854a3a-2127-422b-91ae-364da2661108", "tags": ["Exploit", "Third Party Advisory"], "url": "https://github.com/ParsingTeam/ppsx-file-generator"}, {"source": "af854a3a-2127-422b-91ae-364da2661108", "tags": ["Third Party Advisory"], "url": "https://github.com/rxwx/CVE-2017-8570"}, {"source": "af854a3a-2127-422b-91ae-364da2661108", "tags": ["Exploit", "Third Party Advisory"], "url": "https://github.com/tezukanice/Office8570"}, {"source": "af854a3a-2127-422b-91ae-364da2661108", "tags": ["Patch", "Vendor Advisory"], "url": "https://portal.msrc.microsoft.com/en-us/security-guidance/advisory/CVE-2017-8570"}], "sourceIdentifier": "[email protected]", "vulnStatus": "Deferred", "weaknesses": [{"description": [{"lang": "en", "value": "NVD-CWE-noinfo"}], "source": "[email protected]", "type": "Primary"}]}