PT-2018-1564 · Microsoft · Office 2016+1

Nicolas Joly · Publicado 2018-09-11 · Atualizado 2020-08-24 · CVE-2018-8331

Positive Technologies (AI Summary)

CVSS v2.0

9.3

Alta

Vetor base

AV:N/AC:M/Au:N/C:C/I:C/A:C

Name of the Vulnerable Software and Affected Versions Microsoft Office 2016

Description The issue is related to errors in processing objects in memory in Microsoft Excel, part of the Microsoft Office package. This can allow a remote attacker to execute arbitrary code in the context of the current user.

Recommendations For Microsoft Office 2016, update to a version that properly handles objects in memory to prevent remote code execution. As a temporary workaround, consider restricting access to potentially vulnerable Excel files until a patch is available.

Correção

Buffer Overflow

Enumeração de Fraquezas

CWE-119

Identificadores relacionados

BDU:2018-01119

CVE-2018-8331

Produtos afetados

Office Excel

Office 2016

Referências · 6

• https://osv.dev/vulnerability/CVE-2018-8331 · Aviso do Fabricante
• https://portal.msrc.microsoft.com/en-US/security-guidance/advisory/CVE-2018-8331 · Aviso do Fabricante
• http://securityfocus.com/bid/105206 · Nota
• http://securitytracker.com/id/1041630 · Nota
• https://nvd.nist.gov/vuln/detail/CVE-2018-8331 · Nota de Segurança
• https://bdu.fstec.ru/vul/2018-01119 · Nota de Segurança