CVE-2017-11934

EUVD-2017-3520
Microsoft Office 2013 RT SP1, Microsoft Office 2013 SP1, and Microsoft Office 2016 allow an information disclosure vulnerability due to the way certain functions handle objects in memory, aka "Microsoft Office Information Disclosure Vulnerability".
ProviderTypeBase ScoreAtk. VectorAtk. ComplexityPriv. RequiredVector
NISTPrimary
5.5 MEDIUM
LOCAL
LOW
NONE
CVSS:3.0/AV:L/AC:L/PR:N/UI:R/S:U/C:H/I:N/A:N
Awaiting analysis
This vulnerability is currently awaiting analysis.
Base Score
CVSS 3.x
EPSS Score
Percentile: 95%
Common Weakness Enumeration
References
http://www.securityfocus.com/bid/102064
http://www.securitytracker.com/id/1039998
https://portal.msrc.microsoft.com/en-US/security-guidance/advisory/CVE-2017-11934
http://www.securityfocus.com/bid/102064
http://www.securitytracker.com/id/1039998
https://portal.msrc.microsoft.com/en-US/security-guidance/advisory/CVE-2017-11934