Description of the security update for Word 2013: January 9, 2018

🗓️ 19 Jan 2018 08:00:00Reported by MicrosoftType

Security update for Word 2013 resolves remote code execution vulnerabilities and nonsecurity issues including crashes and startup performance improvements. Method to obtain update from Microsoft Update, Catalog, or Download Center with specific KB numbers

Reporter	Title	Published	Views	Family All 172
ATTACKERKB	CVE-2018-0798	10 Jan 201800:00	–	attackerkb
ATTACKERKB	CVE-2018-0802	10 Jan 201800:00	–	attackerkb
BDU FSTEC	The vulnerability of the editor for mathematical formulas and equations in the Microsoft Word text editor, as well as in the Microsoft Office suite of programs and the Microsoft Office Compatibility Pack, allows a perpetrator to execute arbitrary code.	21 Feb 201800:00	–	bdu_fstec
BDU FSTEC	The vulnerability of the editor for mathematical formulas and equations in the Microsoft Word text editor, as well as in the Microsoft Office suite of programs and the Microsoft Office Compatibility Pack, allows a perpetrator to execute arbitrary code.	21 Feb 201800:00	–	bdu_fstec
BDU FSTEC	The vulnerability of the editor for mathematical formulas and equations in the Microsoft Word text editor, as well as in the Microsoft Office suite of programs and the Microsoft Office Compatibility Pack, allows a perpetrator to execute arbitrary code.	21 Feb 201800:00	–	bdu_fstec
BDU FSTEC	The vulnerability affects the editor for mathematical formulas and equations in the Microsoft Word text editor, as well as the Microsoft Office suite of programs and the Microsoft Office Compatibility Pack. This vulnerability allows a perpetrator to execute arbitrary code.	21 Feb 201800:00	–	bdu_fstec
BDU FSTEC	The vulnerability of the editor for mathematical formulas and equations in the Microsoft Word text editor, as well as in the Microsoft Office suite of programs and the Microsoft Office Compatibility Pack, allows a perpetrator to execute arbitrary code.	21 Feb 201800:00	–	bdu_fstec
BDU FSTEC	The vulnerability of the Microsoft Office software package arises from improper handling of objects in memory, allowing an attacker to execute arbitrary code.	21 Mar 201800:00	–	bdu_fstec
BDU FSTEC	The vulnerability of the Microsoft Outlook email client, related to deficiencies in access control, allows a hacker to execute arbitrary code.	21 Mar 201800:00	–	bdu_fstec
BDU FSTEC	The vulnerability of the Equation Editor component in the Microsoft Office software package allows a hacker to execute arbitrary code.	12 Apr 201800:00	–	bdu_fstec

19 Jan 2018 08:00Current

8.9High risk

Vulners AI Score8.9

CVSS 38.8

CVSS 29.3

CVSS 3.18.8

EPSS0.95121

SSVC