Vulnerability CVE-2018-8504


Published: 2018-10-10

Description:
A remote code execution vulnerability exists in Microsoft Word software when the software fails to properly handle objects in Protected View, aka "Microsoft Word Remote Code Execution Vulnerability." This affects Microsoft SharePoint Server, Office 365 ProPlus, Microsoft Office, Microsoft Word.

Type:

CWE-noinfo

CVSS2 => (AV:N/AC:M/Au:N/C:C/I:C/A:C)

CVSS Base Score
Impact Subscore
Exploitability Subscore
9.3/10
10/10
8.6/10
Exploit range
Attack complexity
Authentication
Remote
Medium
No required
Confidentiality impact
Integrity impact
Availability impact
Complete
Complete
Complete
Affected software
Microsoft -> Office 
Microsoft -> Office 365 proplus 
Microsoft -> Office web apps 
Microsoft -> Sharepoint server 
Microsoft -> WORD 

 References:
http://www.securityfocus.com/bid/105499
http://www.securitytracker.com/id/1041840
https://portal.msrc.microsoft.com/en-US/security-guidance/advisory/CVE-2018-8504

Copyright 2020, cxsecurity.com

 

Back to Top