CVE:CVE-2017-8696
CNNVD:CNNVD-201705-1081
Microsoft Windows Server 2008 SP2等都是美国微软（Microsoft）公司的产品。Microsoft Windows Server 2008 SP2等是一系列操作系统；Office 2010 SP2是一套办公软件套件；Word Viewer是一套免费的Office Word文档查看器。Uniscribe是其中的一个能够使Windows操作系统正确演示Unicode文字的组件。
多款Microsoft产品中的Uniscribe存在远程代码执行漏洞。远程攻击者可借助特制的网站、文档或邮件附件利用该漏洞执行代码。以下产品和版本受到影响：Microsoft Windows Server 2008 SP2和R2 SP1，Windows 7 SP1，Office 2007 SP3；Office 2010 SP2，Word Viewer，Office for Mac 2011和2016；Skype for Business 2016；Lync 2013 SP1，Lync 2010，Lync 2010 Attendee；Live Meeting 2007 Add-in和Console。
solution:Upgrade microsoft live_meeting to a higher version than 2007,and avoid the version 2007; Upgrade microsoft lync to a higher version than 2010,2013:sp1,and avoid the version 2010,2013:sp1; Upgrade microsoft office_2007 to a higher version than -:sp3,and avoid the version -:sp3; Upgrade microsoft office_2010 to a higher version than *:sp2,and avoid the version *:sp2; Upgrade microsoft office_web_apps to a higher version than 2010:sp2,and avoid the version 2010:sp2; Upgrade microsoft office_word_viewer to a higher version than -; Upgrade microsoft skype_for_business to a higher version than 2016,and avoid the version 2016; Upgrade microsoft windows_7 to a higher version than *:sp1,and avoid the version *:sp1; Upgrade microsoft windows_server_2008 to a higher version than *:sp2,-:sp2,r2:sp1,and avoid the version *:sp2,-:sp2,r2:sp1