CVE-2017-0053

Microsoft Office 2010 SP2, Office Compatibility Pack SP3, Word 2007 SP3, Word 2010 SP2, Word 2013 SP1, Word 2013 R2 SP1, Word 2016, and Word Viewer allow remote attackers to execute arbitrary code or cause a denial of service (memory corruption) via a crafted document, aka "Microsoft Office Memory Corruption Vulnerability." This vulnerability is different from those described in CVE-2017-0006, CVE-2017-0019, CVE-2017-0020, CVE-2017-0030, CVE-2017-0031, and CVE-2017-0052.

• CWE-119

• http://www.securityfocus.com/bid/96745Third Party Advisory, VDB Entry
• http://www.securitytracker.com/id/1038010
• https://portal.msrc.microsoft.com/en-US/security-guidance/advisory/CVE-2017-0053Patch, Vendor Advisory
• http://www.securityfocus.com/bid/96745Third Party Advisory, VDB Entry
• http://www.securitytracker.com/id/1038010
• https://portal.msrc.microsoft.com/en-US/security-guidance/advisory/CVE-2017-0053Patch, Vendor Advisory

Published

Mar 17, 2017

Last Modified

Jun 17, 2026

Status

Modified

• How Strix found a critical auth bypass in etcdStrix autonomously discovered a critical authentication bypass in etcd, later designated CVE-2026-33413.
• Autonomous PentestingAI agents that find and validate exploitable vulnerabilities like this one across your applications.
• PR ReviewsPentest every pull request so vulnerable code is caught before it ships to production.
• AI Penetration TestingHow AI-driven penetration testing continuously covers your attack surface.

• CVE-2017-0045Windows DVD Maker in Windows 7 SP1, Windows Server 2008 SP2 …
• CVE-2017-0047The Graphics Device Interface (GDI) in Microsoft Windows Vis…
• CVE-2017-0049The VBScript engine in Microsoft Internet Explorer 11 allows…
• CVE-2017-0050The kernel API in Microsoft Windows Vista SP2; Windows Serve…
• CVE-2017-0051Microsoft Windows 10 1607 and Windows Server 2016 allow remo…
• CVE-2017-0052Microsoft Office Compatibility Pack SP3, Excel 2007 SP3, Exc…
• CVE-2017-0055Microsoft Internet Information Server (IIS) in Windows Vista…
• CVE-2017-0056The kernel-mode drivers in Microsoft Windows Vista SP2; Wind…
• CVE-2017-0057DNS client in Microsoft Windows 8.1; Windows Server 2012 R2,…
• CVE-2017-0058A Win32k information disclosure vulnerability exists in Micr…
• CVE-2017-0059Microsoft Internet Explorer 9 through 11 allow remote attack…4.3
• CVE-2017-0060The Graphics Device Interface (GDI) in Microsoft Windows Vis…5.5