CVE-2018-8579

Опубликовано: 14 нояб. 2018

Источник: nvd

CVSS3: 6.5

CVSS2: 4

EPSS Низкий

Описание

An information disclosure vulnerability exists when attaching files to Outlook messages, aka "Microsoft Outlook Information Disclosure Vulnerability." This affects Office 365 ProPlus, Microsoft Office. This CVE ID is unique from CVE-2018-8558.

Ссылки

http://www.securityfocus.com/bid/105828
Third Party Advisory
VDB Entry
http://www.securitytracker.com/id/1042132
Third Party Advisory
VDB Entry
https://portal.msrc.microsoft.com/en-US/security-guidance/advisory/CVE-2018-8579
Patch
Vendor Advisory
http://www.securityfocus.com/bid/105828
Third Party Advisory
VDB Entry
http://www.securitytracker.com/id/1042132
Third Party Advisory
VDB Entry
https://portal.msrc.microsoft.com/en-US/security-guidance/advisory/CVE-2018-8579
Patch
Vendor Advisory

Уязвимые конфигурации

Конфигурация 1

Одно из

cpe:2.3:a:microsoft:office:2019:*:*:*:*:*:*:*

cpe:2.3:a:microsoft:office_365_proplus:-:*:*:*:*:*:*:*

EPSS

Процентиль: 93%

0.06325

Низкий

6.5 Medium

CVSS3

4 Medium

CVSS2

Дефекты

NVD-CWE-noinfo

Связанные уязвимости

CVE-2018-8579

msrc

больше 7 лет назад

Microsoft Outlook Information Disclosure Vulnerability

GHSA-qmwc-jg89-8mqr

CVSS3: 6.5

github

около 4 лет назад

BDU:2018-01476

CVSS3: 7.5

fstec