HTTP: Microsoft Word CVE-2017-0199 Remote Code Execution

This signature detects attempts to exploit a known vulnerability against Microsoft Word. Successful exploitation can lead to Remote Code Execution.

Extended Description

Microsoft Office 2007 SP3, Microsoft Office 2010 SP2, Microsoft Office 2013 SP1, Microsoft Office 2016, Microsoft Windows Vista SP2, Windows Server 2008 SP2, Windows 7 SP1, Windows 8.1 allow remote attackers to execute arbitrary code via a crafted document, aka "Microsoft Office/WordPad Remote Code Execution Vulnerability w/Windows API."

Affected Products

Philips intellispace_portal

References

CVE: CVE-2017-0199

Short Name
HTTP:STC:DL:CVE-2017-0199-RCE
Severity
Major
Recommended
True
Recommended Action
Drop
Category
HTTP
Keywords
CVE-2017-0199 Code Execution Microsoft Remote Word
Release Date
04/06/2017
Supported Platforms

srx-branch-12.3

srx-19.3

srx-branch-19.3

vsrx3bsd-19.2

srx-branch-19.4

vsrx-19.4

mx-12.3

mx-19.4

vmx-19.4

mx-19.3

vsrx3bsd-19.4

srx-19.4

vsrx-12.3

vmx-19.3

vsrx-19.2

srx-12.3

Sigpack Version
3727
False Positive
Unknown
Vendors

Philips

Microsoft

CVSS Score

9.3

Found a potential security threat?