CVE-2018-8378

🗓️ 15 Aug 2018 17:00:00Reported by microsoftType

"Microsoft Office info disclosure due to uninitialized variable

Reporter	Title	Published	Views	Family All 34
CNVD	Microsoft Office Information Disclosure Vulnerability (CNVD-2018-16842)	15 Aug 201800:00	–	cnvd
Cvelist	CVE-2018-8378	15 Aug 201817:00	–	cvelist
Microsoft KB	Description of the security update for Office 2010: August 14, 2018	14 Aug 201807:00	–	mskb
Microsoft KB	Description of the security update for SharePoint Enterprise Server 2013: August 14, 2018	14 Aug 201807:00	–	mskb
Microsoft KB	Description of the security update for Microsoft Office Viewers and Office Compatibility Pack: August 14, 2018	14 Aug 201807:00	–	mskb
Microsoft KB	Description of the security update for Office 2010: August 14, 2018	14 Aug 201807:00	–	mskb
Microsoft KB	Description of the security update for SharePoint Enterprise Server 2013: August 14, 2018	14 Aug 201807:00	–	mskb
Microsoft KB	Description of the security update for SharePoint Server 2013: August 14, 2018	14 Aug 201807:00	–	mskb
Microsoft KB	Description of the security update for Office Web Apps Server 2013: August 14, 2018	14 Aug 201807:00	–	mskb
Microsoft KB	Description of the security update for SharePoint Server 2010: August 14, 2018	14 Aug 201807:00	–	mskb

NVD

Vulners

Node

microsoft excel_viewerMatch2007sp3

microsoft officeMatch2010sp2

microsoft officeMatch2013sp1

microsoft officeMatch2013sp1rt

microsoft officeMatch2016

microsoft officeMatch2016click-to-run

microsoft office_compatibility_packMatch-sp3

microsoft office_web_appsMatch2010sp2

microsoft office_web_appsMatch2013sp1

microsoft office_word_viewerMatch-

microsoft sharepoint_enterprise_server_2013Match-sp1

microsoft sharepoint_enterprise_server_2016Match-

microsoft sharepoint_serverMatch2013sp1

Node

microsoft word_automation_servicesMatch-

AND

microsoft sharepoint_serverMatch2010sp2

[
  {
    "product": "Word",
    "vendor": "Microsoft",
    "versions": [
      {
        "status": "affected",
        "version": "Automation Services on Microsoft SharePoint Server 2010 Service Pack 2"
      }
    ]
  },
  {
    "product": "Microsoft SharePoint Server",
    "vendor": "Microsoft",
    "versions": [
      {
        "status": "affected",
        "version": "2013 Service Pack 1"
      }
    ]
  },
  {
    "product": "Microsoft Office Word Viewer",
    "vendor": "Microsoft",
    "versions": [
      {
        "status": "affected",
        "version": "Microsoft Office Word Viewer"
      }
    ]
  },
  {
    "product": "Microsoft Excel Viewer",
    "vendor": "Microsoft",
    "versions": [
      {
        "status": "affected",
        "version": "2007 Service Pack 3"
      }
    ]
  },
  {
    "product": "Microsoft SharePoint",
    "vendor": "Microsoft",
    "versions": [
      {
        "status": "affected",
        "version": "Enterprise Server 2013 Service Pack 1"
      },
      {
        "status": "affected",
        "version": "Enterprise Server 2016"
      }
    ]
  },
  {
    "product": "Microsoft Office",
    "vendor": "Microsoft",
    "versions": [
      {
        "status": "affected",
        "version": "2010 Service Pack 2 (32-bit editions)"
      },
      {
        "status": "affected",
        "version": "2010 Service Pack 2 (64-bit editions)"
      },
      {
        "status": "affected",
        "version": "2013 RT Service Pack 1"
      },
      {
        "status": "affected",
        "version": "2013 Service Pack 1 (32-bit editions)"
      },
      {
        "status": "affected",
        "version": "2013 Service Pack 1 (64-bit editions)"
      },
      {
        "status": "affected",
        "version": "2016 (32-bit edition)"
      },
      {
        "status": "affected",
        "version": "2016 (64-bit edition)"
      },
      {
        "status": "affected",
        "version": "2016 Click-to-Run (C2R) for 32-bit editions"
      },
      {
        "status": "affected",
        "version": "2016 Click-to-Run (C2R) for 64-bit editions"
      },
      {
        "status": "affected",
        "version": "Web Apps 2010 Service Pack 2"
      },
      {
        "status": "affected",
        "version": "Web Apps 2013 Service Pack 1"
      }
    ]
  }
]

Source	Link
securityfocus	www.securityfocus.com/bid/104996
portal	www.portal.msrc.microsoft.com/en-US/security-guidance/advisory/CVE-2018-8378

21 Nov 2024 04:13Current

4.9Medium risk

Vulners AI Score4.9

CVSS 24.3

CVSS 35.5

EPSS0.328