1. CVE-Search
  2. CVE-2018-0797
ID CVE-2018-0797
Summary Microsoft Office 2010, Microsoft Office 2013, and Microsoft Office 2016 allow a remote code execution vulnerability due to the way RTF content is handled, aka "Microsoft Word Memory Corruption Vulnerability".
References
Vulnerable Configurations
  • cpe:2.3:a:microsoft:office:2010:sp2:*:*:*:*:*:*
    cpe:2.3:a:microsoft:office:2010:sp2:*:*:*:*:*:*
  • cpe:2.3:a:microsoft:office:2016:*:*:*:*:mac_os_x:*:*
    cpe:2.3:a:microsoft:office:2016:*:*:*:*:mac_os_x:*:*
  • cpe:2.3:a:microsoft:office_compatibility_pack:-:sp3:*:*:*:*:*:*
    cpe:2.3:a:microsoft:office_compatibility_pack:-:sp3:*:*:*:*:*:*
  • cpe:2.3:a:microsoft:office_online_server:2016:*:*:*:*:*:*:*
    cpe:2.3:a:microsoft:office_online_server:2016:*:*:*:*:*:*:*
  • cpe:2.3:a:microsoft:office_web_apps:2010:*:*:*:*:*:*:*
    cpe:2.3:a:microsoft:office_web_apps:2010:*:*:*:*:*:*:*
  • cpe:2.3:a:microsoft:office_web_apps:2010:sp2:*:*:*:*:*:*
    cpe:2.3:a:microsoft:office_web_apps:2010:sp2:*:*:*:*:*:*
  • cpe:2.3:a:microsoft:office_web_apps_server:2013:sp1:*:*:*:*:*:*
    cpe:2.3:a:microsoft:office_web_apps_server:2013:sp1:*:*:*:*:*:*
  • cpe:2.3:a:microsoft:sharepoint_enterprise_server:2013:sp1:*:*:*:*:*:*
    cpe:2.3:a:microsoft:sharepoint_enterprise_server:2013:sp1:*:*:*:*:*:*
  • cpe:2.3:a:microsoft:sharepoint_enterprise_server:2016:*:*:*:*:*:*:*
    cpe:2.3:a:microsoft:sharepoint_enterprise_server:2016:*:*:*:*:*:*:*
  • cpe:2.3:a:microsoft:sharepoint_server:2010:sp2:*:*:*:*:*:*
    cpe:2.3:a:microsoft:sharepoint_server:2010:sp2:*:*:*:*:*:*
  • cpe:2.3:a:microsoft:word:2007:sp3:*:*:*:*:*:*
    cpe:2.3:a:microsoft:word:2007:sp3:*:*:*:*:*:*
  • cpe:2.3:a:microsoft:word:2010:sp2:*:*:*:*:*:*
    cpe:2.3:a:microsoft:word:2010:sp2:*:*:*:*:*:*
  • cpe:2.3:a:microsoft:word:2013:sp1:*:*:*:*:*:*
    cpe:2.3:a:microsoft:word:2013:sp1:*:*:*:*:*:*
  • cpe:2.3:a:microsoft:word:2013:sp1:*:*:rt:*:*:*
    cpe:2.3:a:microsoft:word:2013:sp1:*:*:rt:*:*:*
  • cpe:2.3:a:microsoft:word:2016:*:*:*:*:*:*:*
    cpe:2.3:a:microsoft:word:2016:*:*:*:*:*:*:*
  • cpe:2.3:a:microsoft:word_viewer:*:*:*:*:*:*:*:*
    cpe:2.3:a:microsoft:word_viewer:*:*:*:*:*:*:*:*
CVSS
Base: 9.3 (as of 24-08-2020 - 17:37)
Impact:
Exploitability:
CWE CWE-787
CAPEC
Access
VectorComplexityAuthentication
NETWORK MEDIUM NONE
Impact
ConfidentialityIntegrityAvailability
COMPLETE COMPLETE COMPLETE
cvss-vector via4 AV:N/AC:M/Au:N/C:C/I:C/A:C
refmap via4
bid 102406
confirm https://portal.msrc.microsoft.com/en-US/security-guidance/advisory/CVE-2018-0797
sectrack 1040153
Last major update 24-08-2020 - 17:37
Published 10-01-2018 - 01:29
Last modified 24-08-2020 - 17:37
Back to Top