CVE-2017-0199 Report: Apr 2017 Credit: FireEye PoC SyFi/cve-2017-0199 - Sample file used in the wild. bhdresh/CVE-2017-0199 - Exploit toolkit CVE-2017-0199. nixawk/labs Reference Analysis of a CVE-2017-0199 Malicious RTF Document Exploiting CVE-2017-0199: HTA Handler Vulnerability CVE-2017-0199