CVE-2018-8378 An information disclosure vulnerability exists when Microsoft Office software reads out of bound memory due to an uninitialized variable, which could disclose the contents of memory, aka "Microsoft Of...
MediumCVSS 5.5
EPSS 7.3%
- Published
- Updated
- Exploit status
- No public exploit known
Description
An information disclosure vulnerability exists when Microsoft Office software reads out of bound memory due to an uninitialized variable, which could disclose the contents of memory, aka "Microsoft Office Information Disclosure Vulnerability." This affects Word, Microsoft SharePoint Server, Microsoft Office Word Viewer, Microsoft Excel Viewer, Microsoft SharePoint, Microsoft Office.
Affected products
| Product | Affected versions | Fixed in |
|---|---|---|
| Microsoft excel viewer | = 2007-sp3 | No fix listed |
| Microsoft office | = 2010-sp2 | No fix listed |
| Microsoft office | = 2013-sp1 | No fix listed |
| Microsoft office | = 2016 | No fix listed |
| Microsoft office compatibility pack | All versions | No fix listed |
| Microsoft office web apps | = 2010-sp2 | No fix listed |
| Microsoft office web apps | = 2013-sp1 | No fix listed |
| Microsoft office word viewer | All versions | No fix listed |
| Microsoft sharepoint enterprise server 2013 | All versions | No fix listed |
| Microsoft sharepoint enterprise server 2016 | All versions | No fix listed |
| Microsoft sharepoint server | = 2013-sp1 | No fix listed |
| Microsoft word automation services | All versions | No fix listed |
| Microsoft word | = Automation Services on Microsoft SharePoint Server 2010 Service Pack 2 | No fix listed |
| Microsoft SharePoint Server | = 2013 Service Pack 1 | No fix listed |
| Microsoft Office Word Viewer | = Microsoft Office Word Viewer | No fix listed |
| Microsoft Excel Viewer | = 2007 Service Pack 3 | No fix listed |
| Microsoft SharePoint | = Enterprise Server 2013 Service Pack 1 | No fix listed |
| Microsoft SharePoint | = Enterprise Server 2016 | No fix listed |
| Microsoft Office | = 2010 Service Pack 2 (32-bit editions) | No fix listed |
| Microsoft Office | = 2010 Service Pack 2 (64-bit editions) | No fix listed |
| Microsoft Office | = 2013 RT Service Pack 1 | No fix listed |
| Microsoft Office | = 2013 Service Pack 1 (32-bit editions) | No fix listed |
| Microsoft Office | = 2013 Service Pack 1 (64-bit editions) | No fix listed |
| Microsoft Office | = 2016 (32-bit edition) | No fix listed |
| Microsoft Office | = 2016 (64-bit edition) | No fix listed |
Show 4 more
| Product | Affected versions | Fixed in |
|---|---|---|
| Microsoft Office | = 2016 Click-to-Run (C2R) for 32-bit editions | No fix listed |
| Microsoft Office | = 2016 Click-to-Run (C2R) for 64-bit editions | No fix listed |
| Microsoft Office | = Web Apps 2010 Service Pack 2 | No fix listed |
| Microsoft Office | = Web Apps 2013 Service Pack 1 | No fix listed |
References
- 104996 third-party-advisory vdb-entry
- portal.msrc.microsoft.com patch vendor-advisory