CVE-2017-8631

Published: Sep 13, 2017Modified: May 13, 2026

7.8

Vector

CVSS:3.1/AV:L/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H

Exploitability: 1.8 / Impact: 5.9

Source: NVD

Description

A remote code execution vulnerability exists in Excel Services, Microsoft Excel 2007 Service Pack 3, Microsoft Excel 2010 Service Pack 2, Microsoft Excel 2013 Service Pack 1, Microsoft Excel 2013 RT Service Pack 1, Microsoft Excel 2016, Microsoft Office Web Apps 2013, Microsoft Office Compatibility Pack Service Pack 3, Microsoft Excel Web App 2013 Service Pack 1, Microsoft Excel Viewer 2007 Service Pack 3, and Office Online Server when they fail to properly handle objects in memory, aka "Microsoft Office Memory Corruption Vulnerability". This CVE ID is unique from CVE-2017-8630, CVE-2017-8632, and CVE-2017-8744.

Affected (10)

Products: Microsoft: Excel, Excel Viewer, Excel Web App, Office Compatibility Pack, Office Online Server, Office Web Apps

6 products

Office Compatibility Pack

Office Online Server

Office Web Apps

Configuration A

10 vulnerable

Vulnerable Software	Affected Versions
Microsoft Excel	Version 2007
Microsoft Excel	Version 2010
Microsoft Excel	Version 2013
Microsoft Excel	Version 2013 sp1
Microsoft Excel	Version 2016
Microsoft Excel Viewer	Version 2007 sp3
Microsoft Excel Web App	Version 2013 sp1
Microsoft Office Compatibility Pack	All versions
Microsoft Office Online Server	All versions
Microsoft Office Web Apps	Version 2013