CVE:CVE-2017-0195
CNNVD:CNNVD-201704-694
Microsoft Office是美国微软（Microsoft）公司开发的一款办公软件套件产品。常用组件有Word、Excel、Access、Powerpoint、FrontPage等。
Microsoft Office中存在提权漏洞，该漏洞源于程序没有正确的过滤特制的请求。远程攻击者可通过发送特制的请求利用该漏洞实施跨站脚本攻击，在当前用户的上下文中执行脚本。以下版本受到影响：基于Microsoft SharePoint Server 2010 SP1和SP2平台的Excel Service，Excel Web Apps 2010 SP2，Office Web Apps 2010 SP2，Office Web Apps Server 2013 SP1，Office Online Server。
solution:Upgrade microsoft excel_web_app to a higher version than 2010:sp2,and avoid the version 2010:sp2; Upgrade microsoft office_online_server to a higher version than *; Upgrade microsoft office_web_apps to a higher version than 2010:sp2,and avoid the version 2010:sp2; Upgrade microsoft office_web_apps_server to a higher version than 2013:sp1,and avoid the version 2013:sp1; Upgrade microsoft sharepoint_server to a higher version than 2010:sp1,2010:sp2,and avoid the version 2010:sp1,2010:sp2