HTTP: Microsoft Excel 2010 CVE-2017-0020 Use After Free
This signature detects an attempt to exploit an Use-After-Free Vulnerability in Microsoft Excel 2010. Successful exploitation could allow an attacker to execute arbitrary code into the application's context.
Extended Description
Microsoft Excel 2016, Excel 2010 SP2, Excel 2013 RT SP1, and Office Web Apps Server 2013 SP1 allow remote attackers to execute arbitrary code or cause a denial of service (memory corruption) via a crafted document, aka "Microsoft Office Memory Corruption Vulnerability." This vulnerability is different from those described in CVE-2017-0006, CVE-2017-0019, CVE-2017-0030, CVE-2017-0031, CVE-2017-0052, and CVE-2017-0053.
Affected Products
Microsoft excel
References
CVE: CVE-2017-0020
Short Name
HTTP:STC:DL:CVE-2017-0020-UAF
Severity
Major
Recommended
True
Recommended Action
Drop
Category
HTTP
Keywords
2010 After CVE-2017-0020 Excel Free Microsoft Use
Release Date
02/14/2017
Supported Platforms
srx-branch-12.3
srx-19.3
srx-branch-19.3
vsrx3bsd-19.2
srx-branch-19.4
vsrx-19.4
mx-12.3
mx-19.4
vmx-19.4
mx-19.3
vsrx3bsd-19.4
srx-19.4
vsrx-12.3
vmx-19.3
vsrx-19.2
srx-12.3
Sigpack Version
3717
False Positive
Unknown
Vendors
Microsoft
CVSS Score
9.3