ABOUT
Overview
Use Cases
Mapping Methodology
Scoring Rubric
Related Projects
ATT&CK OBJECTS
Matrix
Tactics
Techniques
MAPPING FRAMEWORKS
About Mappings
Amazon Web Services (AWS)
Azure
CVE
Google Cloud Platform (GCP)
NIST 800-53
M365
VERIS
You're currently viewing ATT&CK Version 9.0 Enterprise and CVE 10.21.2021.
Change versions here.
Home
Mapping Frameworks
CVE Home
Microsoft Outlook
CVE
CVE-2017-11774
Mappings
Microsoft Outlook 2010 SP2, Outlook 2013 SP1 and RT SP1, and Outlook 2016 allow an attacker to execute arbitrary commands, due to how Microsoft Office handles objects in memory, aka "Microsoft Outlook Security Feature Bypass Vulnerability."
Mappings
ATT&CK Version
9.0
ATT&CK Domain
Enterprise
CVE
10.21.2021
Change Versions
Capability ID
Capability Description
Mapping Type
ATT&CK ID
ATT&CK Name
CVE-2017-11774
Microsoft Outlook
uncategorized
T1190
Exploit Public-Facing Application