Out-of-bounds read in Microsoft products - CVE-2018-8246
Published: June 12, 2018 / Updated: June 12, 2018
Vulnerability identifier: #VU13308
CSH Severity: Low
CVSS v4: 1.8 [CVSS:4.0/AV:L/AC:L/AT:P/PR:N/UI:A/VC:L/VI:N/VA:N/SC:N/SI:N/SA:N]
CVE-ID: CVE-2018-8246
CWE-ID: CWE-125
Exploitation vector: Remote access
Exploit availability:
No public exploit available
Vulnerability details
The vulnerability allows a remote attacker to obtain potentially sensitive information.
The vulnerability exists due to out-of-bounds read error when processing Excel document. A remote unauthenticated attacker can create a specially crafted Excel file, trick the victim into opening it and gain access to sensitive information stored in memory.
Affected software
Microsoft Excel
Microsoft Office Compatibility Pack
Microsoft Office
Microsoft Office Compatibility Pack
Microsoft Office
How to mitigate CVE-2018-8246
Install updates from vendor's website.