Exploitation active confirmée

Ajoutée au catalogue CISA KEV le 03/11/2021, correctif exigé avant le 03/05/2022 pour les agences fédérales américaines.

Action requise : Apply updates per vendor instructions.

Description officielle (NVD)

Microsoft Office and WordPad contain an unspecified vulnerability due to the way the applications parse specially crafted files. Successful exploitation allows for remote code execution.

Preuves de concept publiques (23)

Dépôts tiers non vérifiés, parfois piégés. Ne les exécutez jamais en production : uniquement dans un environnement de test isolé.

bhdresh/CVE-2017-0199 · ★ 726 · 17/04/2017
Exploit toolkit CVE-2017-0199 - v4.0 is a handy python script which provides pentesters and security researchers a quick and effective way to test Microsoft Office RCE. It could generate a malicious R
haibara3839/CVE-2017-0199-master · ★ 16 · 19/04/2017
CVE-2017-0199
NotAwful/CVE-2017-0199-Fix · ★ 13 · 18/04/2017
Quick and dirty fix to OLE2 executing code via .hta
SyFi/cve-2017-0199 · ★ 12 · 13/04/2017
Exploit-install/CVE-2017-0199 · ★ 7 · 22/04/2017
Exploit toolkit CVE-2017-0199 - v2.0 is a handy python script which provides a quick and effective way to exploit Microsoft RTF RCE. It could generate a malicious RTF file and deliver metasploit / met
jacobsoo/RTF-Cleaner · ★ 3 · 08/12/2017
RTF Cleaner, tries to extract URL from malicious RTF samples using CVE-2017-0199 & CVE-2017-8759
mzakyz666/PoC-CVE-2017-0199 · ★ 2 · 22/04/2017
Exploit toolkit for vulnerability RCE Microsoft RTF
n1shant-sinha/CVE-2017-0199 · ★ 2 · 23/04/2017
Exploit toolkit CVE-2017-0199 - v2.0 is a handy python script which provides a quick and effective way to exploit Microsoft RTF RCE. It could generate a malicious RTF file and deliver metasploit / met
kn0wm4d/htattack · ★ 2 · 24/04/2017
An exploit implementation for RCE in RTF & DOCs (CVE-2017-0199)
nicpenning/RTF-Cleaner · ★ 2 · 03/11/2017
RTF de-obfuscator for CVE-2017-0199 documents to find URLs statically.