CVE-2018-0851

🗓️ 15 Feb 2018 02:00:00Reported by microsoftType

Microsoft Office versions 2007, 2010, 2013, and 2016 allow remote code execution via memory corruptio

Reporter	Title	Published	Views	Family All 24
BDU FSTEC	Vulnerability of the Microsoft Outlook client, the Microsoft Office suite of programs, and the Microsoft Office Word Viewer, caused by an operation that goes beyond the buffer in memory, allowing an attacker to execute arbitrary code.	21 Mar 201800:00	–	bdu_fstec
CNVD	Microsoft Office Memory Corruption Vulnerability (CNVD-2018-03530)	14 Feb 201800:00	–	cnvd
CVE	CVE-2018-0851	15 Feb 201802:00	–	cve
Microsoft KB	Description of the security update for Office 2016: February 13, 2018	13 Feb 201808:00	–	mskb
Microsoft KB	Description of the security update for Office 2013: February 13, 2018	13 Feb 201808:00	–	mskb
Microsoft KB	Description of the security update for Word Viewer: February 13, 2018	13 Feb 201808:00	–	mskb
Microsoft KB	Description of the security update for Office 2010: February 13, 2018	13 Feb 201808:00	–	mskb
Microsoft KB	Description of the security update for 2007 Microsoft Office Suite: February 13, 2018	13 Feb 201808:00	–	mskb
Kaspersky	KLA11197 Multiple vulnerabilities in Microsoft Office	13 Feb 201800:00	–	kaspersky
Microsoft CVE	Microsoft Office Memory Corruption Vulnerability	13 Feb 201808:00	–	mscve

[
  {
    "product": "Microsoft Office",
    "vendor": "Microsoft Corporation",
    "versions": [
      {
        "status": "affected",
        "version": "Microsoft Office 2007 SP2, Microsoft Office Word Viewer, Microsoft Office 2010 SP2, Microsoft Office 2013 SP1 and RT SP1, Microsoft Office 2016, and Microsoft Office 2016 Click-to-Run (C2R)."
      }
    ]
  }
]

Source	Link
securityfocus	www.securityfocus.com/bid/102870
securitytracker	www.securitytracker.com/id/1040381
portal	www.portal.msrc.microsoft.com/en-US/security-guidance/advisory/CVE-2018-0851

15 Feb 2018 10:57Current

8.8High risk

Vulners AI Score8.8

EPSS0.30543