CVE Vulnerability Advisory Database
Filter vulnerabilities by CVSS severity, active CISA KEV exploitation, and technology stack.
Showing 1โ1 of 1 advisories (Page 1/1)
2017-11-15
Microsoft Office Equation Editor Memory Corruption Remote Code Execution Vulnerability (CVE-2017-11882) Technical Advisory
[Affected Scope] Microsoft Office 2007 SP3, 2010 SP2, 2013 SP1, 2016, and systems utilizing the legacy Equation Editor (EQNEDT32.EXE) component
[Impact] Successful exploitation allows remote attackers to execute arbitrary code (RCE) in the context of the current user by tricking them into opening a specially crafted Office document
[Mitigation] Apply the official Microsoft security updates immediately, or disable the Equation Editor component via registry modification to prevent execution