CVE-2017-0105

Microsoft Word 2007 SP3, Office 2010 SP2, Word 2010 SP2, Word for Mac 2011, Office Compatibility Pack SP3, Word Automation Services on SharePoint Server 2010 SP2, and Office Web Apps 2010 SP2 allow remote attackers to obtain sensitive information from out-of-bound memory via a crafted Office document, aka "Microsoft Office Information Disclosure Vulnerability."

• CWE-200

• http://www.securityfocus.com/bid/96746Third Party Advisory, VDB Entry
• http://www.securitytracker.com/id/1038010
• https://portal.msrc.microsoft.com/en-US/security-guidance/advisory/CVE-2017-0105Patch, Vendor Advisory
• http://www.securityfocus.com/bid/96746Third Party Advisory, VDB Entry
• http://www.securitytracker.com/id/1038010
• https://portal.msrc.microsoft.com/en-US/security-guidance/advisory/CVE-2017-0105Patch, Vendor Advisory

Published

Mar 17, 2017

Last Modified

Jun 17, 2026

Status

Modified

• How Strix found a critical auth bypass in etcdStrix autonomously discovered a critical authentication bypass in etcd, later designated CVE-2026-33413.
• Autonomous PentestingAI agents that find and validate exploitable vulnerabilities like this one across your applications.
• PR ReviewsPentest every pull request so vulnerable code is caught before it ships to production.
• AI Penetration TestingHow AI-driven penetration testing continuously covers your attack surface.

• CVE-2017-0099Hyper-V in Microsoft Windows Vista SP2; Windows Server 2008 …
• CVE-2017-0100A DCOM object in Helppane.exe in Microsoft Windows 7 SP1; Wi…
• CVE-2017-0101The kernel-mode drivers in Transaction Manager in Microsoft …7.8
• CVE-2017-0102Microsoft Windows Vista SP2; Windows Server 2008 SP2 and R2;…
• CVE-2017-0103The kernel API in Microsoft Windows Vista SP2, Windows Serve…
• CVE-2017-0104The iSNS Server service in Microsoft Windows Server 2008 SP2…
• CVE-2017-0106Microsoft Excel 2007 SP3, Microsoft Outlook 2010 SP2, Micros…
• CVE-2017-0107Microsoft SharePoint Server fails to sanitize crafted web re…
• CVE-2017-0108The Windows Graphics Component in Microsoft Office 2007 SP3;…
• CVE-2017-0109Hyper-V in Microsoft Windows Vista SP2; Windows Server 2008 …
• CVE-2017-0110Cross-site scripting (XSS) vulnerability in Microsoft Exchan…
• CVE-2017-0111Uniscribe in Microsoft Windows Vista SP2, Windows Server 200…