PT-2018-9084
CVE-2018-0819
·
Published
2018-01-10
·
Updated
2019-10-03
Description by
CVSS 3.1
6.5
MediumMetricsAV:N/AC:L/PR:N/UI:R/S:U/C:N/I:H/A:N
Name of the Vulnerable Software and Affected Versions:
Microsoft Office for Mac version 2016
Description:
The issue allows an attacker to send a specially crafted email attachment to a user in an attempt to launch a social engineering attack, such as phishing, due to how Outlook for Mac displays encoded email addresses.
Recommendations:
For Microsoft Office 2016 for Mac, update the software to a version that fixes the issue, or consider disabling the display of encoded email addresses in Outlook for Mac as a temporary workaround to minimize the risk of exploitation.
Found an issue in the description? Have something to add? Feel free to write us 👾