PT-2018-18466 · Microsoft · Office Word+2

Jens Müller · Published 2018-05-08 · Updated 2018-06-06 · CVE-2018-8160

Positive Technologies (AI Summary)

CVSS v3.1

6.5

Medium

Base vector

AV:N/AC:L/PR:N/UI:R/S:U/C:H/I:N/A:N

Name of the Vulnerable Software and Affected Versions Microsoft Outlook (affected versions not specified) Microsoft Word (affected versions not specified) Microsoft Office (affected versions not specified)

Description An information disclosure issue exists when a message is opened in Outlook, potentially resulting in the disclosure of sensitive information to a malicious site.

Recommendations For Microsoft Outlook, consider implementing additional security measures to protect sensitive information when opening messages. For Microsoft Word, restrict access to potentially malicious documents until a fix is available. For Microsoft Office, apply configuration changes to minimize the risk of information disclosure when using Outlook to open messages. At the moment, there is no information about a newer version that contains a fix for this vulnerability.

Information Disclosure

Weakness Enumeration

CWE-200

Related Identifiers

CVE-2018-8160

Affected Products

Office

Outlook

Office Word

References · 5

• https://osv.dev/vulnerability/CVE-2018-8160 · Vendor Advisory
• https://portal.msrc.microsoft.com/en-US/security-guidance/advisory/CVE-2018-8160 · Vendor Advisory
• https://nvd.nist.gov/vuln/detail/CVE-2018-8160 · Security Note
• http://securitytracker.com/id/1040852 · Note
• http://securityfocus.com/bid/104051 · Note