Lucene search
K
Database
Vendors
Products
Years
CVSS
Scanner
Agent Scanning
API Scanning
Manual Audit
Perimeter Scanner
Scanning
Projects
Email
Webhook
Plugins
Resources
Documents
Blog
Glossary
FAQ
Pricing
Contacts
About Us
Partners
Branding Guideline
cve[email protected]CVE-2018-8427
HistoryOct 10, 2018 - 1:29 p.m.

CVE-2018-8427

2018-10-1013:29:00
CWE-200
[email protected]
web.nvd.nist.gov
45
cve-2018-8427
information disclosure
microsoft
graphics components
memory handling
office
windows server
powerpoint viewer
excel viewer

5.5 Medium

CVSS3

Attack Vector

LOCAL

Attack Complexity

LOW

Privileges Required

LOW

User Interaction

NONE

Scope

UNCHANGED

Confidentiality Impact

HIGH

Integrity Impact

NONE

Availability Impact

NONE

CVSS:3.0/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:N/A:N

5.7 Medium

AI Score

Confidence

High

2.1 Low

CVSS2

Access Vector

LOCAL

Access Complexity

LOW

Authentication

NONE

Confidentiality Impact

PARTIAL

Integrity Impact

NONE

Availability Impact

NONE

AV:L/AC:L/Au:N/C:P/I:N/A:N

0.003 Low

EPSS

Percentile

65.5%

JSON

An information disclosure vulnerability exists in the way that Microsoft Graphics Components handle objects in memory, aka “Microsoft Graphics Components Information Disclosure Vulnerability.” This affects Microsoft Office, Microsoft Office Word Viewer, Office 365 ProPlus, Windows Server 2008, Microsoft PowerPoint Viewer, Microsoft Excel Viewer.

VendorProductVersionCPE
microsoftoffice*cpe:2.3:a:microsoft:office:*:*:*:*:*:*:*:*
microsoftoffice*cpe:2.3:a:microsoft:office:*:*:*:*:*:*:*:*
microsoftoffice*cpe:2.3:a:microsoft:office:*:*:*:*:*:*:*:*
microsoftoffice*cpe:2.3:a:microsoft:office:*:*:*:*:*:*:*:*
microsoftoffice_word_viewer*cpe:2.3:a:microsoft:office_word_viewer:*:*:*:*:*:*:*:*
microsoftwindows_server_200832-bit Systems Service Pack 2cpe:2.3:o:microsoft:windows_server_2008:32-bit Systems Service Pack 2:*:*:*:*:*:*:*
microsoftwindows_server_200832-bit Systems Service Pack 2 (Server Core installation)cpe:2.3:o:microsoft:windows_server_2008:32-bit Systems Service Pack 2 (Server Core installation):*:*:*:*:*:*:*
microsoftwindows_server_2008Itanium-Based Systems Service Pack 2cpe:2.3:o:microsoft:windows_server_2008:Itanium-Based Systems Service Pack 2:*:*:*:*:*:*:*
microsoftwindows_server_2008x64-based Systems Service Pack 2cpe:2.3:o:microsoft:windows_server_2008:x64-based Systems Service Pack 2:*:*:*:*:*:*:*
microsoftwindows_server_2008x64-based Systems Service Pack 2 (Server Core installation)cpe:2.3:o:microsoft:windows_server_2008:x64-based Systems Service Pack 2 (Server Core installation):*:*:*:*:*:*:*
Rows per page:
1-10 of 141

Related

mscve 1
symantec 1
prion 1
mskb 4
openvas 5
nessus 2
kaspersky 2
talosblog 1
mscve
mscve
Microsoft Graphics Components Information Disclosure Vulnerability
2018-10-09 07:00:00
symantec
symantec
Microsoft Windows Graphics Component CVE-2018-8427 Information Disclosure Vulnerability
2018-10-09 00:00:00
prion
prion
Information disclosure
2018-10-10 13:29:00
mskb
mskb
Description of the security update for Word Viewer: October 9, 2018
2018-10-09 07:00:00
Description of the security update for Microsoft Office Viewers and Office Compatibility Pack: October 9, 2018
2018-10-09 07:00:00
October 9, 2018—KB4463097 (Monthly Rollup)
2018-10-09 07:00:00
openvas
openvas
Microsoft Office Word Viewer Graphics Components Multiple Vulnerabilities (KB4092464)
2018-10-10 00:00:00
Microsoft Excel Viewer 2007 Multiple Vulnerabilities (KB4092444)
2018-10-10 00:00:00
Microsoft PowerPoint Viewer 2007 Multiple Vulnerabilities (KB4092444)
2018-10-10 00:00:00
nessus
nessus
Security Updates for Microsoft Office Viewer Products / Office Compatibility Products (October 2018)
2018-10-09 00:00:00
KB4463104: Windows Server 2008 October 2018 Security Update
2018-10-09 00:00:00
kaspersky
kaspersky
KLA11334 Multiple vulnerabilities in Microsoft Office
2018-10-09 00:00:00
KLA11889 Multiple vulnerabilities in Microsoft Products (ESU)
2018-10-09 00:00:00
talosblog
talosblog
Microsoft Patch Tuesday — October 18: Vulnerability disclosures and Snort coverage
2018-10-09 11:38:00

5.5 Medium

CVSS3

Attack Vector

LOCAL

Attack Complexity

LOW

Privileges Required

LOW

User Interaction

NONE

Scope

UNCHANGED

Confidentiality Impact

HIGH

Integrity Impact

NONE

Availability Impact

NONE

CVSS:3.0/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:N/A:N

5.7 Medium

AI Score

Confidence

High

2.1 Low

CVSS2

Access Vector

LOCAL

Access Complexity

LOW

Authentication

NONE

Confidentiality Impact

PARTIAL

Integrity Impact

NONE

Availability Impact

NONE

AV:L/AC:L/Au:N/C:P/I:N/A:N

0.003 Low

EPSS

Percentile

65.5%

JSON
Related for CVE-2018-8427
mscve1symantec1prion1mskb4openvas5nessus2kaspersky2talosblog1