CVE-2017-0027

Name of the Vulnerable Software and Affected Versions Microsoft Excel versions 2007 SP3 through 2016 Office Compatibility Pack version SP3 Excel Services on SharePoint Server version 2013 SP1

Description The issue is related to the improper disclosure of memory contents by Microsoft Office, allowing remote attackers to obtain sensitive information from process memory via a crafted Office document. This could potentially be used to compromise the user's computer or data.

Recommendations For Microsoft Excel versions 2007 SP3 through 2016, update to a version that includes the fix for this issue. For Office Compatibility Pack version SP3, update to a version that includes the fix for this issue. For Excel Services on SharePoint Server version 2013 SP1, update to a version that includes the fix for this issue. As a temporary workaround, consider avoiding the use of crafted Office documents until a patch is available.