CVE-2018-8382

Опубликовано: 15 авг. 2018

Источник: nvd

CVSS3: 5.5

CVSS2: 4.3

EPSS Средний

Описание

An information disclosure vulnerability exists when Microsoft Excel improperly discloses the contents of its memory, aka "Microsoft Excel Information Disclosure Vulnerability." This affects Microsoft Excel Viewer, Microsoft Office, Microsoft Excel.

Ссылки

http://www.securityfocus.com/bid/105000
Third Party Advisory
VDB Entry
http://www.securitytracker.com/id/1041463
Third Party Advisory
VDB Entry
https://portal.msrc.microsoft.com/en-US/security-guidance/advisory/CVE-2018-8382
Patch
Vendor Advisory
http://www.securityfocus.com/bid/105000
Third Party Advisory
VDB Entry
http://www.securitytracker.com/id/1041463
Third Party Advisory
VDB Entry
https://portal.msrc.microsoft.com/en-US/security-guidance/advisory/CVE-2018-8382
Patch
Vendor Advisory

Уязвимые конфигурации

Конфигурация 1

Одно из

cpe:2.3:a:microsoft:excel:2010:sp2:*:*:*:*:*:*

cpe:2.3:a:microsoft:excel:2013:sp1:*:*:*:*:*:*

cpe:2.3:a:microsoft:excel:2016:*:*:*:*:*:*:*

cpe:2.3:a:microsoft:excel:2016:*:*:*:click-to-run:*:*:*

cpe:2.3:a:microsoft:excel_2013_rt:sp1:*:*:*:*:*:*:*

cpe:2.3:a:microsoft:excel_viewer:2007:sp3:*:*:*:*:*:*

cpe:2.3:a:microsoft:office:2016:*:*:*:*:mac:*:*

cpe:2.3:a:microsoft:office_compatibility_pack:-:sp3:*:*:*:*:*:*

EPSS

Процентиль: 95%

0.1795

Средний

5.5 Medium

CVSS3

4.3 Medium

CVSS2

Дефекты

CWE-200

Связанные уязвимости

CVE-2018-8382

msrc

около 7 лет назад

Microsoft Excel Information Disclosure Vulnerability

GHSA-4v6r-gxrx-pjw8

CVSS3: 5.5

github

больше 3 лет назад

BDU:2018-01054

CVSS3: 6.2

fstec