PT-2018-1503

CVE-2018-8382

·

Published

2018-08-14

·

Updated

2018-10-12

Description by

CVSS 3.1
5.5
Medium
MetricsAV:L/AC:L/PR:N/UI:R/S:U/C:H/I:N/A:N
Name of the Vulnerable Software and Affected Versions Microsoft Office (affected versions not specified) Microsoft Excel (affected versions not specified) Microsoft Excel Viewer (affected versions not specified)
Description The issue is related to errors in processing objects in memory, which can lead to the disclosure of protected information through a specially crafted document. An attacker who exploits this issue could use the disclosed information to compromise the user's computer or data. To exploit the issue, an attacker would need to craft a special document file and convince the user to open it, requiring knowledge of the memory address location where the object was created.
Recommendations For Microsoft Office, update to a version that includes the fix for this issue. For Microsoft Excel, consider avoiding the use of specially crafted document files until a patch is available. For Microsoft Excel Viewer, restrict access to potentially vulnerable documents to minimize the risk of exploitation. At the moment, there is no information about a newer version that contains a fix for this vulnerability.
Impacts
Researchers
Vendors
Affected products
Related identifiers
Found an issue in the description? Have something to add? Feel free to write us 👾