7.8
Élevée
Exploitée
· rançongiciel
CVE-2018-0802 Microsoft Office Memory Corruption Vulnerability
Exploitation active constatée
· catalogue CISA KEV
Action attendue
Apply updates per vendor instructions.
Campagnes de rançongiciel
Utilisation connue
Faiblesse
CWE-787
Description
Equation Editor in Microsoft Office 2007, Microsoft Office 2010, Microsoft Office 2013, and Microsoft Office 2016 allow a remote code execution vulnerability due to the way objects are handled in memory, aka "Microsoft Office Memory Corruption Vulnerability". This CVE is unique from CVE-2018-0797 and CVE-2018-0812.
Produits et versions touchés
| Produit | Versions touchées | Corrigé en |
|---|---|---|
| Equation Editor | Versions non publiées |
Références
- portal.msrc.microsoft.com portal.msrc.microsoft.com
- github.com github.com
- 1040153 www.securitytracker.com
- 0patch.blogspot.com 0patch.blogspot.com
- 102347 www.securityfocus.com
- github.com github.com
- research.checkpoint.com research.checkpoint.com
Chronologie
- Publiée
- Ajoutée au catalogue KEV
- Dernière modification
Autres CVE de Equation Editor
Les 12 CVE de Equation Editor →
CVE-2018-0845
Equation Editor in Microsoft Office 2003, Microsoft Office 2007, Microsoft Office 2010, Microsoft Office 2013, and…
Non notée
CVE-2018-0862
Equation Editor in Microsoft Office 2003, Microsoft Office 2007, Microsoft Office 2010, Microsoft Office 2013, and…
Non notée
CVE-2018-0849
Equation Editor in Microsoft Office 2003, Microsoft Office 2007, Microsoft Office 2010, Microsoft Office 2013, and…
Non notée
CVE-2018-0848
Equation Editor in Microsoft Office 2003, Microsoft Office 2007, Microsoft Office 2010, Microsoft Office 2013, and…
Non notée