Microsoft Office security update

Number: AV17-177
Date: 29 November 2017

Purpose

The purpose of this advisory is to bring attention to a recent security update for Microsoft Office.

Assessment

CCIRC is aware of a critical vulnerability in Microsoft Office.  Exploitation of this vulnerability may allow for remote code execution.

Affected Versions: 

  • Microsoft Office 2010 Service Pack 2 (32-bit editions) 
  • Microsoft Office 2010 Service Pack 2 (64-bit editions) 
  • Microsoft Office 2013 Service Pack 1 (32-bit editions) 
  • Microsoft Office 2013 Service Pack 1 (64-bit editions)  
  • Microsoft Office 2016 (32-bit edition)
  • Microsoft Office 2016 (64-bit edition) 
  • Microsoft Office 2007 Service Pack 3

CVE Reference: CVE-2017-11882

Suggested Action

CCIRC recommends that owner/operators test and deploy the vendor released updates or workarounds to affected platforms accordingly.

References:

https://portal.msrc.microsoft.com/en-US/security-guidance/advisory/CVE-2017-11882

Report a problem on this page
Please select all that apply:

Thank you for your help!

You will not receive a reply. For enquiries, please contact us.

Date modified: