CVE-2018-8429

Опубликовано: 13 сент. 2018

Источник: nvd

CVSS3: 5.5

CVSS2: 4.3

EPSS Средний

Описание

An information disclosure vulnerability exists when Microsoft Excel improperly discloses the contents of its memory, aka "Microsoft Excel Information Disclosure Vulnerability." This affects Microsoft Excel Viewer, Microsoft Office, Microsoft Excel.

Ссылки

http://www.securityfocus.com/bid/105219
Third Party Advisory
VDB Entry
http://www.securitytracker.com/id/1041630
Third Party Advisory
VDB Entry
https://portal.msrc.microsoft.com/en-US/security-guidance/advisory/CVE-2018-8429
Patch
Vendor Advisory
http://www.securityfocus.com/bid/105219
Third Party Advisory
VDB Entry
http://www.securitytracker.com/id/1041630
Third Party Advisory
VDB Entry
https://portal.msrc.microsoft.com/en-US/security-guidance/advisory/CVE-2018-8429
Patch
Vendor Advisory

Уязвимые конфигурации

Конфигурация 1

Одно из

cpe:2.3:a:microsoft:excel:2010:sp2:*:*:*:*:*:*

cpe:2.3:a:microsoft:excel:2013:sp1:*:*:*:*:*:*

cpe:2.3:a:microsoft:excel:2013:sp1:*:*:rt:*:*:*

cpe:2.3:a:microsoft:excel:2016:*:*:*:*:*:*:*

cpe:2.3:a:microsoft:excel_viewer:2007:sp3:*:*:*:*:*:*

cpe:2.3:a:microsoft:office:2016:*:*:*:click-to-run:*:*:*

cpe:2.3:a:microsoft:office_compatibility_pack:-:sp3:*:*:*:*:*:*

cpe:2.3:a:microsoft:office_for_mac:2016:*:*:*:*:*:*:*

EPSS

Процентиль: 95%

0.1822

Средний

5.5 Medium

CVSS3

4.3 Medium

CVSS2

Дефекты

CWE-200

Связанные уязвимости

CVE-2018-8429

msrc

больше 7 лет назад

Microsoft Excel Information Disclosure Vulnerability

GHSA-xqvw-jp2q-crr2

CVSS3: 5.5

github

больше 3 лет назад

BDU:2018-01199

CVSS3: 6.3

fstec