CVE-2018-0802

🗓️ 10 Jan 2018 01:00:00Reported by microsoftType

cve🔗 web.nvd.nist.gov📰️ 9 Media mentions👁 2372 Views

Equation Editor remote code execution vulnerability in Microsoft Office 2007, 2010, 2013, 2016. "Microsoft Office Memory Corruption Vulnerability". Unique from other CVEs

Reporter	Title	Published	Views	Family All 110
GithubExploit	Exploit for Improper Restriction of Operations within the Bounds of a Memory Buffer in Microsoft	16 Jan 201805:49	–	githubexploit
GithubExploit	Exploit for Out-of-bounds Write in Microsoft	11 Jan 201809:16	–	githubexploit
GithubExploit	Exploit for Improper Restriction of Operations within the Bounds of a Memory Buffer in Microsoft	12 Jan 201811:38	–	githubexploit
GithubExploit	Exploit for Improper Restriction of Operations within the Bounds of a Memory Buffer in Microsoft	16 Jan 201805:49	–	githubexploit
GithubExploit	Exploit for Out-of-bounds Write in Microsoft	11 Jan 201809:43	–	githubexploit
Gitee	Exploit for Out-of-bounds Write in Microsoft	22 Feb 202122:13	–	gitee
ATTACKERKB	CVE-2018-0802	10 Jan 201800:00	–	attackerkb
Information Security Automation	September 2023: VM courses, Bahasa Indonesia, Russian Podcasts, Goodbye Tinkoff, MS Patch Tuesday, Qualys TOP 20, Linux, Forrester, GigaOm, R-Vision VM	30 Sep 202319:31	–	avleonov
BDU FSTEC	The vulnerability affects the editor for mathematical formulas and equations in the Microsoft Word text editor, as well as the Microsoft Office suite of programs and the Microsoft Office Compatibility Pack. This vulnerability allows a perpetrator to execute arbitrary code.	21 Feb 201800:00	–	bdu_fstec
Carbon Black Blog	Threat Analysis Unit (TAU) Threat Intelligence Notification: Tick Downloaders (Operation ENDTRADE)	10 Dec 201915:34	–	carbonblack

NVD

Node

microsoft officeMatch2007sp3

microsoft officeMatch2010sp2

microsoft officeMatch2013sp1-

microsoft officeMatch2016

microsoft officeMatch2016click-to-run

microsoft office_compatibility_packMatch-sp3

microsoft wordMatch2007sp3

microsoft wordMatch2010sp2

microsoft wordMatch2013sp1-

microsoft wordMatch2013sp1rt

microsoft wordMatch2016

[
  {
    "product": "Equation Editor",
    "vendor": "Microsoft Corporation",
    "versions": [
      {
        "status": "affected",
        "version": "Microsoft Office 2007, Microsoft Office 2010, Microsoft Office 2013, and Microsoft Office 2016"
      }
    ]
  }
]

Source	Link
securityfocus	www.securityfocus.com/bid/102347
github	www.github.com/rxwx/CVE-2018-0802
portal	www.portal.msrc.microsoft.com/en-US/security-guidance/advisory/CVE-2018-0802
0patch	www.0patch.blogspot.com/2018/01/the-bug-that-killed-equation-editor-how.html
github	www.github.com/zldww2011/CVE-2018-0802_POC
research	www.research.checkpoint.com/another-office-equation-rce-vulnerability/
securitytracker	www.securitytracker.com/id/1040153
cisa	www.cisa.gov/known-exploited-vulnerabilities-catalog

28 Oct 2025 14:14Current

8.5High risk

Vulners AI Score8.5

CVSS 3.17.8

CVSS 29.3

EPSS0.94073

SSVC