Lucene search

[email protected]NVD:CVE-2018-8427

HistoryOct 10, 2018 - 1:29 p.m.

CVE-2018-8427

2018-10-1013:29:02

CWE-200

[email protected]

web.nvd.nist.gov

CVSS2

2.1

Attack Vector

LOCAL

Attack Complexity

LOW

Authentication

NONE

Confidentiality Impact

PARTIAL

Integrity Impact

NONE

Availability Impact

NONE

AV:L/AC:L/Au:N/C:P/I:N/A:N

CVSS3

5.5

Attack Vector

LOCAL

Attack Complexity

LOW

Privileges Required

LOW

User Interaction

NONE

Scope

UNCHANGED

Confidentiality Impact

HIGH

Integrity Impact

NONE

Availability Impact

NONE

CVSS:3.0/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:N/A:N

AI Score

Confidence

High

EPSS

0.002

Percentile

62.2%

JSON

An information disclosure vulnerability exists in the way that Microsoft Graphics Components handle objects in memory, aka “Microsoft Graphics Components Information Disclosure Vulnerability.” This affects Microsoft Office, Microsoft Office Word Viewer, Office 365 ProPlus, Windows Server 2008, Microsoft PowerPoint Viewer, Microsoft Excel Viewer.

Affected configurations

Nvd

Node

microsoftexcel_viewerMatch2007sp3

microsoftofficeMatch2016mac_os_x

microsoftofficeMatch2019

microsoftoffice_365_proplusMatch-

microsoftoffice_compatibility_packMatch-sp3

microsoftoffice_word_viewerMatch-

microsoftpowerpoint_viewerMatch2007

microsoftwindows_server_2008Match-sp2

VendorProductVersionCPE
microsoftexcel_viewer2007cpe:2.3:a:microsoft:excel_viewer:2007:sp3:*:*:*:*:*:*
microsoftoffice2016cpe:2.3:a:microsoft:office:2016:*:*:*:*:mac_os_x:*:*
microsoftoffice2019cpe:2.3:a:microsoft:office:2019:*:*:*:*:*:*:*
microsoftoffice_365_proplus-cpe:2.3:a:microsoft:office_365_proplus:-:*:*:*:*:*:*:*
microsoftoffice_compatibility_pack-cpe:2.3:a:microsoft:office_compatibility_pack:-:sp3:*:*:*:*:*:*
microsoftoffice_word_viewer-cpe:2.3:a:microsoft:office_word_viewer:-:*:*:*:*:*:*:*
microsoftpowerpoint_viewer2007cpe:2.3:a:microsoft:powerpoint_viewer:2007:*:*:*:*:*:*:*
microsoftwindows_server_2008-cpe:2.3:o:microsoft:windows_server_2008:-:sp2:*:*:*:*:*:*

Vendor	Product	Version	CPE
microsoft	excel_viewer	2007	cpe:2.3:a:microsoft:excel_viewer:2007:sp3::::::
microsoft	office	2016	cpe:2.3:a:microsoft:office:2016:::::mac_os_x::
microsoft	office	2019	cpe:2.3:a:microsoft:office:2019:::::::*
microsoft	office_365_proplus	-	cpe:2.3:a:microsoft:office_365_proplus:-:::::::*
microsoft	office_compatibility_pack	-	cpe:2.3:a:microsoft:office_compatibility_pack:-:sp3::::::
microsoft	office_word_viewer	-	cpe:2.3:a:microsoft:office_word_viewer:-:::::::*
microsoft	powerpoint_viewer	2007	cpe:2.3:a:microsoft:powerpoint_viewer:2007:::::::*
microsoft	windows_server_2008	-	cpe:2.3:o:microsoft:windows_server_2008:-:sp2::::::