CVE-2018-0797

Published: Jan 10, 2018Modified: Nov 21, 2024

7.8

Vector

CVSS:3.0/AV:L/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H

Exploitability: 1.8 / Impact: 5.9

Source: NVD

Description

Microsoft Office 2010, Microsoft Office 2013, and Microsoft Office 2016 allow a remote code execution vulnerability due to the way RTF content is handled, aka "Microsoft Word Memory Corruption Vulnerability".

Affected (16)

Products: Microsoft: Office, Office Compatibility Pack, Office Online Server, Office Web Apps, Office Web Apps Server, Sharepoint Enterprise Server, Sharepoint Server, Word, Word Viewer

Microsoft

9 products

Office

Office Compatibility Pack

Office Online Server

Office Web Apps

Office Web Apps Server

Sharepoint Enterprise Server

Sharepoint Server

Word

Word Viewer

Configuration A

16 vulnerable

Vulnerable Software	Affected Versions
Microsoft Office	Version 2010 sp2
Microsoft Office	Version 2016
Microsoft Office Compatibility Pack	All versions
Microsoft Office Online Server	Version 2016
Microsoft Office Web Apps	Version 2010
Microsoft Office Web Apps	Version 2010 sp2
Microsoft Office Web Apps Server	Version 2013 sp1
Microsoft Sharepoint Enterprise Server	Version 2013 sp1
Microsoft Sharepoint Enterprise Server	Version 2016
Microsoft Sharepoint Server	Version 2010 sp2
Microsoft Word	Version 2007 sp3
Microsoft Word	Version 2010 sp2
Microsoft Word	Version 2013 sp1
Microsoft Word	Version 2013 sp1
Microsoft Word	Version 2016
Microsoft Word Viewer	All versions