Lucene search

[email protected]CVE-2018-8429

HistorySep 13, 2018 - 12:29 a.m.

CVE-2018-8429

2018-09-1300:29:03

CWE-200

[email protected]

web.nvd.nist.gov

cve-2018-8429

information disclosure

microsoft excel

memory disclosure

nvd

microsoft office

excel viewer

5.5 Medium

CVSS3

Attack Vector

LOCAL

Attack Complexity

LOW

Privileges Required

NONE

User Interaction

REQUIRED

Scope

UNCHANGED

Confidentiality Impact

HIGH

Integrity Impact

NONE

Availability Impact

NONE

CVSS:3.0/AV:L/AC:L/PR:N/UI:R/S:U/C:H/I:N/A:N

5 Medium

AI Score

Confidence

High

4.3 Medium

CVSS2

Access Vector

Access Complexity

Authentication

NONE

Confidentiality Impact

PARTIAL

Integrity Impact

NONE

Availability Impact

NONE

AV:N/AC:M/Au:N/C:P/I:N/A:N

JSON

An information disclosure vulnerability exists when Microsoft Excel improperly discloses the contents of its memory, aka “Microsoft Excel Information Disclosure Vulnerability.” This affects Microsoft Excel Viewer, Microsoft Office, Microsoft Excel.

CPE configuration

Vulners

NVD

microsoftexcel_viewer

microsoftoffice

microsoftexcel

VendorProductVersionCPE
microsoftexcel_viewer*cpe:2.3:a:microsoft:excel_viewer:*:*:*:*:*:*:*:*
microsoftoffice*cpe:2.3:a:microsoft:office:*:*:*:*:*:*:*:*
microsoftoffice*cpe:2.3:a:microsoft:office:*:*:*:*:*:*:*:*
microsoftoffice*cpe:2.3:a:microsoft:office:*:*:*:*:*:*:*:*
microsoftoffice*cpe:2.3:a:microsoft:office:*:*:*:*:*:*:*:*
microsoftexcel*cpe:2.3:a:microsoft:excel:*:*:*:*:*:*:*:*
microsoftexcel*cpe:2.3:a:microsoft:excel:*:*:*:*:*:*:*:*
microsoftexcel*cpe:2.3:a:microsoft:excel:*:*:*:*:*:*:*:*
microsoftexcel*cpe:2.3:a:microsoft:excel:*:*:*:*:*:*:*:*
microsoftexcel*cpe:2.3:a:microsoft:excel:*:*:*:*:*:*:*:*

Vendor	Product	Version	CPE
microsoft	excel_viewer	*	cpe:2.3:a:microsoft:excel_viewer::::::::
microsoft	office	*	cpe:2.3:a:microsoft:office::::::::
microsoft	office	*	cpe:2.3:a:microsoft:office::::::::
microsoft	office	*	cpe:2.3:a:microsoft:office::::::::
microsoft	office	*	cpe:2.3:a:microsoft:office::::::::
microsoft	excel	*	cpe:2.3:a:microsoft:excel::::::::
microsoft	excel	*	cpe:2.3:a:microsoft:excel::::::::
microsoft	excel	*	cpe:2.3:a:microsoft:excel::::::::
microsoft	excel	*	cpe:2.3:a:microsoft:excel::::::::
microsoft	excel	*	cpe:2.3:a:microsoft:excel::::::::

Rows per page:

1-10 of 121

CNA Affected

[
  {
    "product": "Microsoft Excel Viewer",
    "vendor": "Microsoft",
    "versions": [
      {
        "status": "affected",
        "version": "2007 Service Pack 3"
      }
    ]
  },
  {
    "product": "Microsoft Office",
    "vendor": "Microsoft",
    "versions": [
      {
        "status": "affected",
        "version": "2016 Click-to-Run (C2R) for 32-bit editions"
      },
      {
        "status": "affected",
        "version": "2016 Click-to-Run (C2R) for 64-bit editions"
      },
      {
        "status": "affected",
        "version": "2016 for Mac"
      },
      {
        "status": "affected",
        "version": "Compatibility Pack Service Pack 3"
      }
    ]
  },
  {
    "product": "Microsoft Excel",
    "vendor": "Microsoft",
    "versions": [
      {
        "status": "affected",
        "version": "2010 Service Pack 2 (32-bit editions)"
      },
      {
        "status": "affected",
        "version": "2010 Service Pack 2 (64-bit editions)"
      },
      {
        "status": "affected",
        "version": "2013 RT Service Pack 1"
      },
      {
        "status": "affected",
        "version": "2013 Service Pack 1 (32-bit editions)"
      },
      {
        "status": "affected",
        "version": "2013 Service Pack 1 (64-bit editions)"
      },
      {
        "status": "affected",
        "version": "2016 (32-bit edition)"
      },
      {
        "status": "affected",
        "version": "2016 (64-bit edition)"
      }
    ]
  }
]