The vulnerability affects the editor for mathematical formulas and equations in the Microsoft Word text editor, as well as the Microsoft Office suite of programs and the Microsoft Office Compatibility Pack. This vulnerability allows a perpetrator to execute arbitrary code.

🗓️ 21 Feb 2018 00:00:00Reported by FSTEC of Russia — Information Security Threat DatabaseType

bdu_fstec

bdu_fstec🔗 bdu.fstec.ru👁 9 Views

Vulnerability in Word formula editor and Office suite allows remote arbitrary code execution via out-of-bounds operation.

Reporter	Title	Published	Views	Family All 110
GithubExploit	Exploit for Improper Restriction of Operations within the Bounds of a Memory Buffer in Microsoft	16 Jan 201805:49	–	githubexploit
GithubExploit	Exploit for Out-of-bounds Write in Microsoft	11 Jan 201809:16	–	githubexploit
GithubExploit	Exploit for Improper Restriction of Operations within the Bounds of a Memory Buffer in Microsoft	12 Jan 201811:38	–	githubexploit
GithubExploit	Exploit for Improper Restriction of Operations within the Bounds of a Memory Buffer in Microsoft	16 Jan 201805:49	–	githubexploit
GithubExploit	Exploit for Out-of-bounds Write in Microsoft	11 Jan 201809:43	–	githubexploit
Gitee	Exploit for Out-of-bounds Write in Microsoft	22 Feb 202122:13	–	gitee
ATTACKERKB	CVE-2018-0802	10 Jan 201800:00	–	attackerkb
Information Security Automation	September 2023: VM courses, Bahasa Indonesia, Russian Podcasts, Goodbye Tinkoff, MS Patch Tuesday, Qualys TOP 20, Linux, Forrester, GigaOm, R-Vision VM	30 Sep 202319:31	–	avleonov
Carbon Black Blog	Threat Analysis Unit (TAU) Threat Intelligence Notification: Tick Downloaders (Operation ENDTRADE)	10 Dec 201915:34	–	carbonblack
Circl	CVE-2018-0802	12 Jan 201822:03	–	circl

Source	Link
securityfocus	www.securityfocus.com/bid/102347
securitytracker	www.securitytracker.com/id/1040153
0patch	www.0patch.blogspot.com/2018/01/the-bug-that-killed-equation-editor-how.html
github	www.github.com/rxwx/CVE-2018-0802
github	www.github.com/zldww2011/CVE-2018-0802_POC
portal	www.portal.msrc.microsoft.com/en-US/security-guidance/advisory/CVE-2018-0802
threats	www.threats.kaspersky.com/ru/threat/Exploit.MSOffice.CVE-2018-0802.gen
web	www.web.nvd.nist.gov/view/vuln/detail

28 Sep 2021 00:00Current

8.1High risk

Vulners AI Score8.1

CVSS 37.3

CVSS 29.3

EPSS0.87417

Word formula editor Office suite Office compatibility pack remote code execution memory corruption