CVE-2018-8310

Опубликовано: 11 июл. 2018

Источник: nvd

CVSS3: 7.5

CVSS2: 5

EPSS Низкий

Описание

A tampering vulnerability exists when Microsoft Outlook does not properly handle specific attachment types when rendering HTML emails, aka "Microsoft Office Tampering Vulnerability." This affects Microsoft Word, Microsoft Office.

Ссылки

http://www.securityfocus.com/bid/104615
Third Party Advisory
VDB Entry
http://www.securitytracker.com/id/1041274
Third Party Advisory
VDB Entry
https://portal.msrc.microsoft.com/en-US/security-guidance/advisory/CVE-2018-8310
Patch
Vendor Advisory
http://www.securityfocus.com/bid/104615
Third Party Advisory
VDB Entry
http://www.securitytracker.com/id/1041274
Third Party Advisory
VDB Entry
https://portal.msrc.microsoft.com/en-US/security-guidance/advisory/CVE-2018-8310
Patch
Vendor Advisory

Уязвимые конфигурации

Конфигурация 1

Одно из

cpe:2.3:a:microsoft:office:2010:sp2:*:*:*:*:*:*

cpe:2.3:a:microsoft:office:2016:*:*:*:click-to-run:*:*:*

Конфигурация 2

Одно из

cpe:2.3:a:microsoft:word:2010:sp2:*:*:*:*:*:*

cpe:2.3:a:microsoft:word:2013:sp1:*:*:*:*:*:*

cpe:2.3:a:microsoft:word:2013:sp1:*:*:rt:*:*:*

cpe:2.3:a:microsoft:word:2016:*:*:*:*:*:*:*

EPSS

Процентиль: 91%

0.07474

Низкий

7.5 High

CVSS3

5 Medium

CVSS2

Дефекты

NVD-CWE-noinfo

Связанные уязвимости

CVE-2018-8310

msrc

около 7 лет назад

Microsoft Office Tampering Vulnerability

GHSA-r995-g428-fh4c