#VU11053 Out-of-bouds read in Microsoft products - CVE-2018-0919
Published: March 13, 2018 / Updated: March 13, 2018
Vulnerability identifier: #VU11053
Vulnerability risk: Low
CVSSv4.0: CVSS:4.0/AV:N/AC:L/AT:N/PR:N/UI:N/VC:L/VI:N/VA:N/SC:N/SI:N/SA:N/E:U/U:Clear
CVE-ID: CVE-2018-0919
CWE-ID: CWE-125
Exploitation vector: Remote access
Exploit availability:
No public exploit available
Vulnerable software:
Microsoft Office for macOS
Microsoft Office
Microsoft Word
Microsoft Office Web Apps
Microsoft SharePoint Server
Microsoft Office Web Apps Server
Office Online Server
Microsoft Office for macOS
Microsoft Office
Microsoft Word
Microsoft Office Web Apps
Microsoft SharePoint Server
Microsoft Office Web Apps Server
Office Online Server
Software vendor:
Microsoft
Microsoft
Description
The vulnerability allows a remote attacker to obtain potentially sensitive information.
The vulnerability exists due to a boundary error when processing Microsoft Office files. A remote attacker can create a specially crafted Microsoft Office file, trick the victim into opening it and view content of memory out of buffer bounds.
Remediation
Install updates from vendor's website.