Lucene search

K
nvd[email protected]NVD:CVE-2018-0922
HistoryMar 14, 2018 - 5:29 p.m.

CVE-2018-0922

2018-03-1417:29:02
CWE-787
web.nvd.nist.gov

9.3 High

CVSS2

Attack Vector

NETWORK

Attack Complexity

MEDIUM

Authentication

NONE

Confidentiality Impact

COMPLETE

Integrity Impact

COMPLETE

Availability Impact

COMPLETE

AV:N/AC:M/Au:N/C:C/I:C/A:C

7.8 High

CVSS3

Attack Vector

LOCAL

Attack Complexity

LOW

Privileges Required

NONE

User Interaction

REQUIRED

Scope

UNCHANGED

Confidentiality Impact

HIGH

Integrity Impact

HIGH

Availability Impact

HIGH

CVSS:3.0/AV:L/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H

8 High

AI Score

Confidence

High

0.08 Low

EPSS

Percentile

94.3%

Microsoft Office 2010 SP2, 2013 SP1, and 2016, Microsoft Office 2016 Click-to-Run Microsoft Office 2016 for Mac, Microsoft Office Compatibility Pack SP2, Microsoft Office Web Apps 2010 SP2, Microsoft Office Web Apps 2013 SP1, Microsoft Office Word Viewer, Microsoft SharePoint Enterprise Server 2013 SP1, Microsoft SharePoint Enterprise Server 2016, Microsoft Office Compatibility Pack SP2, Microsoft Online Server 2016, Microsoft SharePoint Server 2010 SP2, Microsoft Word 2007 SP3, Microsoft Word 2010 SP2, Word 2013 and Microsoft Word 2016 allow a remote code execution vulnerability due to how objects are handled in memory, aka “Microsoft Office Memory Corruption Vulnerability”.

Affected configurations

NVD
Node
microsoftofficeMatch2010sp2
OR
microsoftofficeMatch2013sp1
OR
microsoftofficeMatch2016
OR
microsoftofficeMatch2016mac
OR
microsoftofficeMatch2016click-to-run
OR
microsoftoffice_compatibility_packMatch-sp2
OR
microsoftoffice_online_serverMatch2016
OR
microsoftoffice_web_appsMatch2010sp2
OR
microsoftoffice_web_appsMatch2013sp1
OR
microsoftoffice_word_viewerMatch-
OR
microsoftsharepoint_enterprise_serverMatch2013sp1
OR
microsoftsharepoint_enterprise_serverMatch2016
OR
microsoftsharepoint_serverMatch2010sp2
OR
microsoftwordMatch2007sp3
OR
microsoftwordMatch2010sp2
OR
microsoftwordMatch2013
OR
microsoftwordMatch2016

9.3 High

CVSS2

Attack Vector

NETWORK

Attack Complexity

MEDIUM

Authentication

NONE

Confidentiality Impact

COMPLETE

Integrity Impact

COMPLETE

Availability Impact

COMPLETE

AV:N/AC:M/Au:N/C:C/I:C/A:C

7.8 High

CVSS3

Attack Vector

LOCAL

Attack Complexity

LOW

Privileges Required

NONE

User Interaction

REQUIRED

Scope

UNCHANGED

Confidentiality Impact

HIGH

Integrity Impact

HIGH

Availability Impact

HIGH

CVSS:3.0/AV:L/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H

8 High

AI Score

Confidence

High

0.08 Low

EPSS

Percentile

94.3%