5.5

CVE-2018-8378

An information disclosure vulnerability exists when Microsoft Office software reads out of bound memory due to an uninitialized variable, which could disclose the contents of memory, aka "Microsoft Office Information Disclosure Vulnerability." This affects Word, Microsoft SharePoint Server, Microsoft Office Word Viewer, Microsoft Excel Viewer, Microsoft SharePoint, Microsoft Office.

Data is provided by the National Vulnerability Database (NVD)
Microsoft ≫ Excel Viewer Version2007 Updatesp3
Microsoft ≫ Office Version2010 Updatesp2
Microsoft ≫ Office Version2013 Updatesp1
Microsoft ≫ Office Version2013 Updatesp1 SwEditionrt
Microsoft ≫ Office Version2016
Microsoft ≫ Office Version2016 SwEditionclick-to-run
Microsoft ≫ Office Compatibility Pack Version- Updatesp3
Microsoft ≫ Office Web Apps Version2010 Updatesp2
Microsoft ≫ Office Web Apps Version2013 Updatesp1
Microsoft ≫ Sharepoint Server Version2013 Updatesp1
Microsoft ≫ Word Automation Services Version-
   Microsoft ≫ Sharepoint Server Version2010 Updatesp2
Zu dieser CVE wurde keine CISA KEV oder CERT.AT-Warnung gefunden.
EPSS Metriken
Type Source Score Percentile
EPSS FIRST.org 23% 0.954
CVSS Metriken
Source Base Score Exploit Score Impact Score Vector string
nvd@nist.gov 5.5 1.8 3.6
CVSS:3.0/AV:L/AC:L/PR:N/UI:R/S:U/C:H/I:N/A:N
nvd@nist.gov 4.3 8.6 2.9
AV:N/AC:M/Au:N/C:P/I:N/A:N
CWE-125 Out-of-bounds Read

The product reads data past the end, or before the beginning, of the intended buffer.

CWE-908 Use of Uninitialized Resource

The product uses or accesses a resource that has not been initialized.

http://www.securityfocus.com/bid/104996
Third Party Advisory
VDB Entry