PT-2018-18466 · Microsoft · Office Word+2

Jens Müller · Publicado 2018-05-08 · Atualizado 2018-06-06 · CVE-2018-8160

Positive Technologies (AI Summary)

CVSS v3.1

6.5

Média

Vetor base

AV:N/AC:L/PR:N/UI:R/S:U/C:H/I:N/A:N

Name of the Vulnerable Software and Affected Versions Microsoft Outlook (affected versions not specified) Microsoft Word (affected versions not specified) Microsoft Office (affected versions not specified)

Description An information disclosure issue exists when a message is opened in Outlook, potentially resulting in the disclosure of sensitive information to a malicious site.

Recommendations For Microsoft Outlook, consider implementing additional security measures to protect sensitive information when opening messages. For Microsoft Word, restrict access to potentially malicious documents until a fix is available. For Microsoft Office, apply configuration changes to minimize the risk of information disclosure when using Outlook to open messages. At the moment, there is no information about a newer version that contains a fix for this vulnerability.

Information Disclosure

Enumeração de Fraquezas

CWE-200

Identificadores relacionados

CVE-2018-8160

Produtos afetados

Office

Outlook

Office Word

Referências · 5

• https://osv.dev/vulnerability/CVE-2018-8160 · Aviso do Fabricante
• http://securitytracker.com/id/1040852 · Nota
• http://securityfocus.com/bid/104051 · Nota
• https://portal.msrc.microsoft.com/en-US/security-guidance/advisory/CVE-2018-8160 · Aviso do Fabricante
• https://nvd.nist.gov/vuln/detail/CVE-2018-8160 · Nota de Segurança