PT-2018-2284 · Microsoft · Outlook

Publicado 2018-11-13 · Atualizado 2020-08-24 · CVE-2018-8582

Positive Technologies (AI Summary)

CVSS v2.0

9.3

Alta

Vetor base

AV:N/AC:M/Au:N/C:C/I:C/A:C

Name of the Vulnerable Software and Affected Versions Microsoft Outlook (affected versions not specified)

Description The issue is related to insufficient input validation in Microsoft Outlook, allowing a remote attacker to execute arbitrary code by using a specially crafted rule export file. This could enable the attacker to take control of the affected system, install programs, view, change, or delete data, or create new accounts with full user rights. Users with limited user rights on the system may be less affected than those operating with administrative rights.

Recommendations At the moment, there is no information about a newer version that contains a fix for this vulnerability.

RCE

Enumeração de Fraquezas

CWE-20

Identificadores relacionados

BDU:2019-00408

CVE-2018-8582

Produtos afetados

Outlook

Referências · 6

• https://portal.msrc.microsoft.com/en-US/security-guidance/advisory/CVE-2018-8582 · Aviso do Fabricante
• https://nvd.nist.gov/vuln/detail/CVE-2018-8582 · Nota de Segurança
• http://securityfocus.com/bid/105825 · Nota
• https://osv.dev/vulnerability/CVE-2018-8582 · Aviso do Fabricante
• http://securitytracker.com/id/1042110 · Nota
• https://bdu.fstec.ru/vul/2019-00408 · Nota de Segurança