HTTP: Microsoft Rich Text Format CVE-2017-0003 Remote Code Execution
This signature detects attempts to exploit a known vulnerability against Microsoft Rich Text Format files. Successful exploitation of the vulnerability can possibly lead to execution of remote code.
Extended Description
Microsoft Word 2016 and SharePoint Enterprise Server 2016 allow remote attackers to execute arbitrary code via a crafted document, aka "Microsoft Office Memory Corruption Vulnerability."
Affected Products
Microsoft word
References
CVE: CVE-2017-0003
Short Name
HTTP:STC:DL:CVE-2017-0003-RCE
Severity
Major
Recommended
True
Recommended Action
Drop
Category
HTTP
Keywords
CVE-2017-0003 Code Execution Format Microsoft Remote Rich Text
Release Date
01/10/2017
Supported Platforms
srx-branch-12.3
srx-19.3
srx-branch-19.3
vsrx3bsd-19.2
srx-branch-19.4
vsrx-19.4
mx-12.3
mx-19.4
vmx-19.4
mx-19.3
vsrx3bsd-19.4
srx-19.4
vsrx-12.3
vmx-19.3
vsrx-19.2
srx-12.3
Sigpack Version
3590
False Positive
Unknown
Vendors
Microsoft
CVSS Score
9.3