PT-2018-1503

CVE-2018-8382

·

Publicado

2018-08-14

·

Atualizado

2018-10-12

Descrição por

CVSS 3.1
5.5
Média
MétricasAV:L/AC:L/PR:N/UI:R/S:U/C:H/I:N/A:N
Name of the Vulnerable Software and Affected Versions Microsoft Office (affected versions not specified) Microsoft Excel (affected versions not specified) Microsoft Excel Viewer (affected versions not specified)
Description The issue is related to errors in processing objects in memory, which can lead to the disclosure of protected information through a specially crafted document. An attacker who exploits this issue could use the disclosed information to compromise the user's computer or data. To exploit the issue, an attacker would need to craft a special document file and convince the user to open it, requiring knowledge of the memory address location where the object was created.
Recommendations For Microsoft Office, update to a version that includes the fix for this issue. For Microsoft Excel, consider avoiding the use of specially crafted document files until a patch is available. For Microsoft Excel Viewer, restrict access to potentially vulnerable documents to minimize the risk of exploitation. At the moment, there is no information about a newer version that contains a fix for this vulnerability.
Impactos
Pesquisadores
Fornecedores
Produtos afetados
Identificadores relacionados
Encontrou algum problema na descrição? Tem algo a acrescentar? Fique à vontade para nos escrever 👾