PT-2018-1503 · Microsoft · Office+2
Ying Xinlei
·
Publicado
2018-08-14
·
Atualizado
2018-10-12
·
CVE-2018-8382
CVSS v3.1
5.5
Média
| Vetor | AV:L/AC:L/PR:N/UI:R/S:U/C:H/I:N/A:N |
Name of the Vulnerable Software and Affected Versions
Microsoft Office (affected versions not specified)
Microsoft Excel (affected versions not specified)
Microsoft Excel Viewer (affected versions not specified)
Description
The issue is related to errors in processing objects in memory, which can lead to the disclosure of protected information through a specially crafted document. An attacker who exploits this issue could use the disclosed information to compromise the user's computer or data. To exploit the issue, an attacker would need to craft a special document file and convince the user to open it, requiring knowledge of the memory address location where the object was created.
Recommendations
For Microsoft Office, update to a version that includes the fix for this issue.
For Microsoft Excel, consider avoiding the use of specially crafted document files until a patch is available.
For Microsoft Excel Viewer, restrict access to potentially vulnerable documents to minimize the risk of exploitation.
At the moment, there is no information about a newer version that contains a fix for this vulnerability.
Buffer Overflow
Information Disclosure
Encontrou algum problema na descrição? Tem algo a acrescentar? Fique à vontade para nos escrever 👾
Identificadores relacionados
Produtos afetados
Office Excel
Excel Viewer
Office