CVE-2018-0797 Microsoft Office 2010, Microsoft Office 2013, and Microsoft Office 2016 allow a remote code execution vulnerability due to the way RTF content is handled, aka "Microsoft Word Memory Corruption Vulnera...
HighCVSS 7.8
EPSS 24.7%
- Published
- Updated
- Exploit status
- No public exploit known
Description
Microsoft Office 2010, Microsoft Office 2013, and Microsoft Office 2016 allow a remote code execution vulnerability due to the way RTF content is handled, aka "Microsoft Word Memory Corruption Vulnerability".
Affected products
| Product | Affected versions | Fixed in |
|---|---|---|
| Microsoft office | = 2010-sp2 | No fix listed |
| Microsoft office | = 2016 | No fix listed |
| Microsoft office compatibility pack | All versions | No fix listed |
| Microsoft Office Online Server | = 2016 | No fix listed |
| Microsoft office web apps | = 2010 | No fix listed |
| Microsoft office web apps | = 2010-sp2 | No fix listed |
| Microsoft office web apps server | = 2013-sp1 | No fix listed |
| Microsoft sharepoint enterprise server | = 2013-sp1 | No fix listed |
| Microsoft sharepoint enterprise server | = 2016 | No fix listed |
| Microsoft sharepoint server | = 2010-sp2 | No fix listed |
| Microsoft word | = 2007-sp3 | No fix listed |
| Microsoft word | = 2010-sp2 | No fix listed |
| Microsoft word | = 2013-sp1 | No fix listed |
| Microsoft word | = 2016 | No fix listed |
| Microsoft word viewer | All versions | No fix listed |
| Microsoft Office | = Microsoft Office | No fix listed |
References
- 102406 third-party-advisory vdb-entry
- 1040153 third-party-advisory vdb-entry
- portal.msrc.microsoft.com patch vendor-advisory