CVE-2017-8512: office 2016; +6 more affected products

Affected technology

office · 2007 · update sp3
microsoft

office · 2010 · update sp2
microsoft

office · 2013 · update sp1
microsoft

office · 2016
microsoft

office online server · 2016
microsoft

office web apps · 2010 · update sp2
microsoft

office web apps server · 2013 · update sp1
microsoft

sharepoint enterprise server · 2013 · update sp1
microsoft

sharepoint enterprise server · 2016
microsoft

word automation services · Version not applicable in the source CPE
microsoft

Microsoft Office · Microsoft Office 2007 Service Pack 3, Microsoft Office 2010 Service Pack 2, Microsoft Office 2013 RT Service Pack 1, Microsoft Office 2013 Service Pack 1, Microsoft Office 2016, Microsoft Office Online Server 2016, Microsoft Office Web Apps 2010 Service Pack 2, Microsoft Office Web Apps Server 2013 Service Pack 1, Microsoft SharePoint Enterprise Server 2013 Service Pack 1, Microsoft SharePoint Enterprise Server 2016, and Word Automation Services.
Microsoft Corporation

Component: Not specified by the source

Attack conditions (NVD, CVSS 3.0): Network (remote) · No privileges required · User interaction required

What an attacker can do

The source reports that an attacker could run code remotely under the conditions described by the source. NVD’s CVSS 3.0 assessment (base score 8.8/10) rates confidentiality, integrity and availability impact as high.