Lucene search
K
Database
Vendors
Products
Years
CVSS
Scanner
Agent Scanning
API Scanning
Manual Audit
Perimeter Scanner
Scanning
Projects
Email
Webhook
Plugins
Resources
Documents
Blog
Glossary
FAQ
Pricing
Contacts
About Us
Partners
Branding Guideline
mskbMicrosoftKB4011580
HistoryJan 09, 2018 - 8:00 a.m.

Description of the security update for Office 2013: January 9, 2018

2018-01-0908:00:00
Microsoft
support.microsoft.com
866

8.8 High

CVSS3

Attack Vector

NETWORK

Attack Complexity

LOW

Privileges Required

NONE

User Interaction

REQUIRED

Scope

UNCHANGED

Confidentiality Impact

HIGH

Integrity Impact

HIGH

Availability Impact

HIGH

CVSS:3.0/AV:N/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H

9 High

AI Score

Confidence

High

9.3 High

CVSS2

Access Vector

NETWORK

Access Complexity

MEDIUM

Authentication

NONE

Confidentiality Impact

COMPLETE

Integrity Impact

COMPLETE

Availability Impact

COMPLETE

AV:N/AC:M/Au:N/C:C/I:C/A:C

0.97 High

EPSS

Percentile

99.7%

JSON

Description of the security update for Office 2013: January 9, 2018

Summary

This security update resolves vulnerabilities in Microsoft Office that could allow remote code execution if a user opens a specially crafted Office file. To learn more about the vulnerabilities, go to the following Common Vulnerabilities and Exposures (CVE).

How to get and install the update

Method 1: Microsoft Update

This update is available from Microsoft Update. When you turn on automatic updating, this update will be downloaded and installed automatically. For more information about how to get security updates automatically, see Windows Update: FAQ.

Method 2: Microsoft Update Catalog

To get the stand-alone package for this update, go to the Microsoft Update Catalog website.

Method 3: Microsoft Download Center

You can get the stand-alone update package through the Microsoft Download Center. Follow the installation instructions on the download page to install the update.

More Information

Security update deployment information

For deployment information about this update, see security update deployment information: January 9, 2018.

Security update replacement information

This security update replaces previously released security update KB 3162047.

File hash information

Package Name Package Hash SHA 1 Package Hash SHA 2
eqnedt322013-kb4011580-fullfile-x64-glb.exe 1938C7BBF2C5BD5604E91C20C0A90297884507ED C146A2952A42D58A9586FB5F4D5FD3AA4797D5963740540ED9EFAC12E5C293FB
eqnedt322013-kb4011580-fullfile-x86-glb.exe FE88D75B859A87DADC695CEBE981DA37EE292B97 F103A113B8BED9050C3C1A8BF46DF86F9AD3B9F8D42C7EABD86FFCB56507F15A

File information

The English version of this security update has the file attributes (or later file attributes) that are listed in the following table. The dates and times for these files are listed in Coordinated Universal Time (UTC). The dates and times for these files on your local computer are displayed in your local time together with your current daylight-saving time (DST) bias. Additionally, the dates and the times may change when you perform certain operations on the files.

__

For all supported x86-based versions of Office 2013

File identifier File name File version File size Date Time
eqnedt32.exe_1025 eqnedt32.exe 0 12-Dec-17 06:57
eqnedt32.exe_1026 eqnedt32.exe 0 12-Dec-17 06:57
eqnedt32.exe_1028 eqnedt32.exe 0 12-Dec-17 06:57
eqnedt32.exe_1029 eqnedt32.exe 0 12-Dec-17 06:57
eqnedt32.exe_1030 eqnedt32.exe 0 12-Dec-17 06:57
eqnedt32.exe_1031 eqnedt32.exe 0 12-Dec-17 06:57
eqnedt32.exe_1032 eqnedt32.exe 0 12-Dec-17 06:57
eqnedt32.exe_1033 eqnedt32.exe 0 12-Dec-17 06:57
eqnedt32.exe_1035 eqnedt32.exe 0 12-Dec-17 06:57
eqnedt32.exe_1036 eqnedt32.exe 0 12-Dec-17 06:57
eqnedt32.exe_1037 eqnedt32.exe 0 12-Dec-17 06:57
eqnedt32.exe_1038 eqnedt32.exe 0 12-Dec-17 06:57
eqnedt32.exe_1040 eqnedt32.exe 0 12-Dec-17 06:57
eqnedt32.exe_1041 eqnedt32.exe 0 12-Dec-17 06:57
eqnedt32.exe_1042 eqnedt32.exe 0 12-Dec-17 06:57
eqnedt32.exe_1043 eqnedt32.exe 0 12-Dec-17 06:57
eqnedt32.exe_1044 eqnedt32.exe 0 12-Dec-17 06:57
eqnedt32.exe_1045 eqnedt32.exe 0 12-Dec-17 06:57
eqnedt32.exe_1046 eqnedt32.exe 0 12-Dec-17 06:57
eqnedt32.exe_1048 eqnedt32.exe 0 12-Dec-17 06:57
eqnedt32.exe_1049 eqnedt32.exe 0 12-Dec-17 06:57
eqnedt32.exe_1050 eqnedt32.exe 0 12-Dec-17 06:57
eqnedt32.exe_1051 eqnedt32.exe 0 12-Dec-17 06:57
eqnedt32.exe_1053 eqnedt32.exe 0 12-Dec-17 06:57
eqnedt32.exe_1054 eqnedt32.exe 0 12-Dec-17 06:57
eqnedt32.exe_1055 eqnedt32.exe 0 12-Dec-17 06:57
eqnedt32.exe_1057 eqnedt32.exe 0 12-Dec-17 06:57
eqnedt32.exe_1058 eqnedt32.exe 0 12-Dec-17 06:57
eqnedt32.exe_1060 eqnedt32.exe 0 12-Dec-17 06:57
eqnedt32.exe_1061 eqnedt32.exe 0 12-Dec-17 06:57
eqnedt32.exe_1062 eqnedt32.exe 0 12-Dec-17 06:57
eqnedt32.exe_1063 eqnedt32.exe 0 12-Dec-17 06:57
eqnedt32.exe_1066 eqnedt32.exe 0 12-Dec-17 06:57
eqnedt32.exe_1081 eqnedt32.exe 0 12-Dec-17 06:57
eqnedt32.exe_1086 eqnedt32.exe 0 12-Dec-17 06:57
eqnedt32.exe_1087 eqnedt32.exe 0 12-Dec-17 06:57
eqnedt32.exe_2070 eqnedt32.exe 0 12-Dec-17 06:57
eqnedt32.exe_2074 eqnedt32.exe 0 12-Dec-17 06:57
eqnedt32.exe_3082 eqnedt32.exe 0 12-Dec-17 06:57
eqnedt32.exe_2052 eqnedt32.exe 0 13-Dec-17 10:04

__

For all supported x64-based versions of Office 2013

File identifier File name File version File size Date Time
eqnedt32.exe_1025 eqnedt32.exe 0 12-Dec-17 06:57
eqnedt32.exe_1026 eqnedt32.exe 0 12-Dec-17 06:57
eqnedt32.exe_1028 eqnedt32.exe 0 12-Dec-17 06:57
eqnedt32.exe_1029 eqnedt32.exe 0 12-Dec-17 06:57
eqnedt32.exe_1030 eqnedt32.exe 0 12-Dec-17 06:57
eqnedt32.exe_1031 eqnedt32.exe 0 12-Dec-17 06:57
eqnedt32.exe_1032 eqnedt32.exe 0 12-Dec-17 06:57
eqnedt32.exe_1033 eqnedt32.exe 0 12-Dec-17 06:57
eqnedt32.exe_1035 eqnedt32.exe 0 12-Dec-17 06:57
eqnedt32.exe_1036 eqnedt32.exe 0 12-Dec-17 06:57
eqnedt32.exe_1037 eqnedt32.exe 0 12-Dec-17 06:57
eqnedt32.exe_1038 eqnedt32.exe 0 12-Dec-17 06:57
eqnedt32.exe_1040 eqnedt32.exe 0 12-Dec-17 06:57
eqnedt32.exe_1041 eqnedt32.exe 0 12-Dec-17 06:57
eqnedt32.exe_1042 eqnedt32.exe 0 12-Dec-17 06:57
eqnedt32.exe_1043 eqnedt32.exe 0 12-Dec-17 06:57
eqnedt32.exe_1044 eqnedt32.exe 0 12-Dec-17 06:57
eqnedt32.exe_1045 eqnedt32.exe 0 12-Dec-17 06:57
eqnedt32.exe_1046 eqnedt32.exe 0 12-Dec-17 06:57
eqnedt32.exe_1048 eqnedt32.exe 0 12-Dec-17 06:57
eqnedt32.exe_1049 eqnedt32.exe 0 12-Dec-17 06:57
eqnedt32.exe_1050 eqnedt32.exe 0 12-Dec-17 06:57
eqnedt32.exe_1051 eqnedt32.exe 0 12-Dec-17 06:57
eqnedt32.exe_1053 eqnedt32.exe 0 12-Dec-17 06:57
eqnedt32.exe_1054 eqnedt32.exe 0 12-Dec-17 06:57
eqnedt32.exe_1055 eqnedt32.exe 0 12-Dec-17 06:57
eqnedt32.exe_1057 eqnedt32.exe 0 12-Dec-17 06:57
eqnedt32.exe_1058 eqnedt32.exe 0 12-Dec-17 06:57
eqnedt32.exe_1060 eqnedt32.exe 0 12-Dec-17 06:57
eqnedt32.exe_1061 eqnedt32.exe 0 12-Dec-17 06:57
eqnedt32.exe_1062 eqnedt32.exe 0 12-Dec-17 06:57
eqnedt32.exe_1063 eqnedt32.exe 0 12-Dec-17 06:57
eqnedt32.exe_1066 eqnedt32.exe 0 12-Dec-17 06:57
eqnedt32.exe_1081 eqnedt32.exe 0 12-Dec-17 06:57
eqnedt32.exe_1086 eqnedt32.exe 0 12-Dec-17 06:57
eqnedt32.exe_1087 eqnedt32.exe 0 12-Dec-17 06:57
eqnedt32.exe_2070 eqnedt32.exe 0 12-Dec-17 06:57
eqnedt32.exe_2074 eqnedt32.exe 0 12-Dec-17 06:57
eqnedt32.exe_3082 eqnedt32.exe 0 12-Dec-17 06:57
eqnedt32.exe_2052 eqnedt32.exe 0 13-Dec-17 10:04

How to get help and support for this security updateHelp for installing updates: Windows Update FAQ

Security solutions for IT professionals: Security Support and Troubleshooting

Help for protecting your Windows-based computer from viruses and malware: Microsoft Secure

Local support according to your country: International SupportPropose a feature or provide feedback on Office Core: Office User Voice portal

Related

prion 12
cve 12
openvas 9
mskb 9
nessus 3
carbonblack 2
cisa_kev 2
kaspersky 1
thn 7
threatpost 5
attackerkb 2
symantec 8
mscve 8
checkpoint_advisories 2
mssecure 1
securelist 28
talosblog 2
fireeye 3
myhack58 3
krebs 1
trendmicroblog 1
qualysblog 4
avleonov 1
prion
prion
Remote code execution
2018-01-10 01:29:00
Remote code execution
2018-01-10 01:29:00
Remote code execution
2018-01-10 01:29:00
cve
cve
CVE-2018-0806
2018-01-10 01:29:00
CVE-2018-0805
2018-01-10 01:29:00
CVE-2018-0807
2018-01-10 01:29:00
openvas
openvas
Microsoft Office 2013 Service Pack 1 Remote Code Execution Vulnerabilities (KB4011580)
2018-01-10 00:00:00
Microsoft Office 2016 Multiple Remote Code Execution Vulnerabilities (KB4011574)
2018-01-10 00:00:00
Microsoft Office 2007 Service Pack 3 Remote Code Execution Vulnerabilities (KB4011656)
2018-01-10 00:00:00
mskb
mskb
Description of the security update for Office 2010: January 9, 2018
2018-01-19 08:00:00
Description of the security update for Office 2016: January 9, 2018
2018-01-19 08:00:00
Description of the security update for 2007 Microsoft Office Suite: January 9, 2018
2018-01-19 08:00:00
nessus
nessus
Security Updates for Microsoft Office Products (January 2018)
2018-01-10 00:00:00
Security Updates for Microsoft Office Compatibility SP3 (January 2018)
2018-01-09 00:00:00
Security Updates for Microsoft Word Products (January 2018)
2018-01-09 00:00:00
carbonblack
carbonblack
Threat Analysis Unit (TAU) Threat Intelligence Notification: Tick Downloaders (Operation ENDTRADE)
2019-12-10 15:34:53
Technical Analysis: Hackers Leveraging COVID-19 Pandemic to Launch Phishing Attacks, Fake Apps/Maps, Trojans, Backdoors, Cryptominers, Botnets & Ransomware
2020-03-19 20:48:06
cisa_kev
cisa_kev
Microsoft Office Memory Corruption Vulnerability
2021-11-03 00:00:00
Microsoft Office Memory Corruption Vulnerability
2021-11-03 00:00:00
kaspersky
kaspersky
KLA11170 Multiple vulnerabilities in Microsoft Office
2018-01-09 00:00:00
thn
thn
New Chinese Malware Targeted Russia's Largest Nuclear Submarine Designer
2021-05-03 07:34:00
Bitter APT Hackers Add Bangladesh to Their List of Targets in South Asia
2022-05-11 12:37:00
Bitter APT Hackers Continue to Target Bangladesh Military Entities
2022-07-06 09:51:00
threatpost
threatpost
PortDoor Espionage Malware Takes Aim at Russian Defense Sector
2021-04-30 19:32:34
Novel 'Victory' Backdoor Spotted in Chinese APT Campaign
2021-06-07 18:49:44
Despite Ringleader’s Arrest, Cobalt Group Still Active
2018-05-28 12:21:42
attackerkb
attackerkb
CVE-2018-0802
2018-01-10 00:00:00
CVE-2018-0798
2018-01-10 00:00:00
symantec
symantec
Microsoft Office CVE-2018-0812 Memory Corruption Vulnerability
2018-01-09 00:00:00
Microsoft Word CVE-2018-0805 Remote Code Execution Vulnerability
2018-01-09 00:00:00
Microsoft Word CVE-2018-0807 Remote Code Execution Vulnerability
2018-01-09 00:00:00
mscve
mscve
Microsoft Office Memory Corruption Vulnerability
2018-01-09 08:00:00
Microsoft Office Memory Corruption Vulnerability
2018-01-09 08:00:00
Microsoft Office Memory Corruption Vulnerability
2018-01-09 08:00:00
checkpoint_advisories
checkpoint_advisories
Microsoft Office Remote Code Execution (CVE-2018-0798)
2019-07-10 00:00:00
Microsoft Office Equation Memory Corruption Remote Code Execution (CVE-2018-0802)
2018-01-08 00:00:00
mssecure
mssecure
Windows Defender ATP device risk score exposes new cyberattack, drives Conditional access to protect networks
2018-11-28 21:46:48
securelist
securelist
The leap of a Cycldek-related threat actor
2021-04-05 10:00:22
MosaicRegressor: Lurking in the Shadows of UEFI
2020-10-05 10:00:45
Spam and phishing in 2021
2022-02-09 10:00:28
talosblog
talosblog
Advanced Mobile Malware Campaign in India uses Malicious MDM - Part 2
2018-07-24 22:24:00
Microsoft Patch Tuesday - January 2018
2018-01-09 13:36:00
fireeye
fireeye
APT37 (Reaper): The Overlooked North Korean Actor
2018-02-20 08:30:00
Government Sector in Central Asia Targeted With New HAWKBALL Backdoor Delivered via Microsoft Office Vulnerabilities
2019-06-05 15:00:00
Zero-Day Exploitation Increasingly Demonstrates Access to Money, Rather than Skill — Intelligence for Vulnerability Management, Part One
2020-04-06 00:00:00
myhack58
myhack58
A use cve-2017-11882 and cve-2018-0802 combination of vulnerability a malicious document analysis-vulnerability warning-the black bar safety net
2018-12-25 00:00:00
A CVE-2017-11882 vulnerability is a new variation of a sample of the debugging and analysis-vulnerability warning-the black bar safety net
2018-12-02 00:00:00
The macro perspective of the office vulnerability, 2010-2018-a vulnerability warning-the black bar safety net
2019-06-13 00:00:00
krebs
krebs
Microsoft’s Jan. 2018 Patch Tuesday Lowdown
2018-01-10 16:07:35
trendmicroblog
trendmicroblog
TippingPoint Threat Intelligence and Zero-Day Coverage – Week of January 8, 2018
2018-01-12 15:09:44
qualysblog
qualysblog
Top 19+ Vulnerability CVEs in Santa’s Dashboard Tracking
2019-12-27 18:01:22
Part 2: An In-Depth Look at the Latest Vulnerability Threat Landscape (Attackers’ Edition)
2023-07-18 13:38:53
Qualys Top 20 Most Exploited Vulnerabilities
2023-09-04 14:00:00
avleonov
avleonov
September 2023: VM courses, Bahasa Indonesia, Russian Podcasts, Goodbye Tinkoff, MS Patch Tuesday, Qualys TOP 20, Linux, Forrester, GigaOm, R-Vision VM
2023-09-30 19:31:42

8.8 High

CVSS3

Attack Vector

NETWORK

Attack Complexity

LOW

Privileges Required

NONE

User Interaction

REQUIRED

Scope

UNCHANGED

Confidentiality Impact

HIGH

Integrity Impact

HIGH

Availability Impact

HIGH

CVSS:3.0/AV:N/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H

9 High

AI Score

Confidence

High

9.3 High

CVSS2

Access Vector

NETWORK

Access Complexity

MEDIUM

Authentication

NONE

Confidentiality Impact

COMPLETE

Integrity Impact

COMPLETE

Availability Impact

COMPLETE

AV:N/AC:M/Au:N/C:C/I:C/A:C

0.97 High

EPSS

Percentile

99.7%

JSON
Related for KB4011580
prion12cve12openvas9mskb9nessus3carbonblack2cisa_kev2kaspersky1thn7threatpost5attackerkb2symantec8mscve8checkpoint_advisories2mssecure1securelist28talosblog2fireeye3myhack583krebs1trendmicroblog1qualysblog4avleonov1