CVE-2017-11826 (CNNVD-201710-162)
中文标题:
Microsoft Office 安全漏洞
英文标题:
Microsoft Office 2010, SharePoint Enterprise Server 2010, SharePoint Server 2010, Web Applications, ...
漏洞描述
中文描述:
Microsoft Office是美国微软（Microsoft）公司开发的一款办公软件套件产品。常用组件有Word、Excel、Access、Powerpoint、FrontPage等。 Microsoft Office中存在远程代码执行漏洞，该漏洞源于程序没有正确的处理内存中的对象。远程攻击者可利用该漏洞在当前用户的上下文中执行任意代码。以下产品受到影响：Microsoft Word Automation Services，Word 2016；Word 2013 SP1；Word 2013 RT SP1；Word 2010 SP2；Word 2007 SP3；SharePoint Enterprise Server 2016；Office Word Viewer；Office Web Apps Server 2013 SP1；Office Web Apps Server 2010 SP2；Office Online Server 2016；Office Compatibility Pack SP3。
英文描述:
Microsoft Office 2010, SharePoint Enterprise Server 2010, SharePoint Server 2010, Web Applications, Office Web Apps Server 2010 and 2013, Word Viewer, Word 2007, 2010, 2013 and 2016, Word Automation Services, and Office Online Server allow remote code execution when the software fails to properly handle objects in memory.
CWE类型:
标签:
受影响产品
| 厂商 | 产品 | 版本 | 版本范围 | 平台 | CPE |
|---|---|---|---|---|---|
| Microsoft Corporation | Microsoft Office | Microsoft Office 2010, SharePoint Enterprise Server 2010, SharePoint Server 2010, Web Applications, Office Web Apps Server 2010 and 2013, Word Viewer, Word 2007, 2010, 2013 and 2016, Word Automation Services, Office Online Server. | - | - |
cpe:2.3:a:microsoft_corporation:microsoft_office:microsoft_office_2010,_sharepoint_enterprise_server_2010,_sharepoint_server_2010,_web_applications,_office_web_apps_server_2010_and_2013,_word_viewer,_word_2007,_2010,_2013_and_2016,_word_automation_services,_office_online_server.:*:*:*:*:*:*:*
|
| microsoft | office_compatibility_pack | - | - | - |
cpe:2.3:a:microsoft:office_compatibility_pack:-:sp3:*:*:*:*:*:*
|
| microsoft | office_online_server | 2016 | - | - |
cpe:2.3:a:microsoft:office_online_server:2016:*:*:*:*:*:*:*
|
| microsoft | office_web_apps_server | 2010 | - | - |
cpe:2.3:a:microsoft:office_web_apps_server:2010:sp2:*:*:*:*:*:*
|
| microsoft | office_web_apps_server | 2013 | - | - |
cpe:2.3:a:microsoft:office_web_apps_server:2013:sp1:*:*:*:*:*:*
|
| microsoft | office_word_viewer | - | - | - |
cpe:2.3:a:microsoft:office_word_viewer:-:*:*:*:*:*:*:*
|
| microsoft | sharepoint_enterprise_server | 2016 | - | - |
cpe:2.3:a:microsoft:sharepoint_enterprise_server:2016:*:*:*:*:*:*:*
|
| microsoft | sharepoint_server | 2010 | - | - |
cpe:2.3:a:microsoft:sharepoint_server:2010:sp2:*:*:*:*:*:*
|
| microsoft | sharepoint_server | 2013 | - | - |
cpe:2.3:a:microsoft:sharepoint_server:2013:sp1:*:*:*:*:*:*
|
| microsoft | word | 2007 | - | - |
cpe:2.3:a:microsoft:word:2007:sp3:*:*:*:*:*:*
|
| microsoft | word | 2010 | - | - |
cpe:2.3:a:microsoft:word:2010:sp2:*:*:*:*:*:*
|
| microsoft | word | 2013 | - | - |
cpe:2.3:a:microsoft:word:2013:sp1:*:*:-:*:*:*
|
| microsoft | word | 2016 | - | - |
cpe:2.3:a:microsoft:word:2016:*:*:*:*:*:*:*
|
解决方案
中文解决方案:
英文解决方案:
临时解决方案:
CVSS评分详情
3.1 (adp)
HIGHCVSS:3.1/AV:L/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H
时间信息
利用信息
数据源详情
| 数据源 | 记录ID | 版本 | 提取时间 |
|---|---|---|---|
| CVE | cve_CVE-2017-11826 |
2025-11-11 15:19:17 | 2025-11-11 07:34:33 |
| NVD | nvd_CVE-2017-11826 |
2025-11-11 14:55:32 | 2025-11-11 07:43:12 |
| CNNVD | cnnvd_CNNVD-201710-162 |
2025-11-11 15:09:54 | 2025-11-11 07:53:21 |
版本与语言
安全公告
变更历史
查看详细变更
- vulnerability_type: 未提取 -> 授权问题
- cnnvd_id: 未提取 -> CNNVD-201710-162
- data_sources: ['cve', 'nvd'] -> ['cnnvd', 'cve', 'nvd']
查看详细变更
- affected_products_count: 1 -> 13
- references_count: 6 -> 7
- data_sources: ['cve'] -> ['cve', 'nvd']