CNVD-2018-10431

Vulnerability from cnvd - Published: 2018-05-28
VLAI Severity ?
Title
Microsoft Office远程代码执行漏洞（CNVD-2018-10431）
Description
Microsoft Office 2010 SP2等都是美国微软（Microsoft）公司的产品。Microsoft Office 2010 SP2是一款办公软件套件产品。Word 2007 SP3是一款文字处理软件。 Microsoft Office中存在远程代码执行漏洞，该漏洞源于程序未能正确的处理内存中的对象。远程攻击者可通过使用受影响的Microsoft Office版本打开特制的文件利用该漏洞在当前用户的上下文中运行任意代码。
Severity
高
Patch Name
Microsoft Office远程代码执行漏洞（CNVD-2018-10431）的补丁
Patch Description
Microsoft Office 2010 SP2等都是美国微软（Microsoft）公司的产品。Microsoft Office 2010 SP2是一款办公软件套件产品。Word 2007 SP3是一款文字处理软件。 Microsoft Office中存在远程代码执行漏洞，该漏洞源于程序未能正确的处理内存中的对象。远程攻击者可通过使用受影响的Microsoft Office版本打开特制的文件利用该漏洞在当前用户的上下文中运行任意代码。目前，供应商发布了安全公告及相关补丁信息，修复了此漏洞。
Formal description

厂商已发布漏洞修复程序，请及时关注更新： https://portal.msrc.microsoft.com/en-US/security-guidance/advisory/CVE-2018-8161

Reference
http://www.securityfocus.com/bid/104052
Impacted products
Name
['Microsoft Office Web Apps 2010 SP2', 'Microsoft Word 2010 SP2', 'Microsoft Office 2010 SP2', 'Microsoft Word 2013 SP1', 'Microsoft Word 2013 RT SP1', 'Microsoft Office Web Apps Server 2013 SP1', 'Microsoft Word 2016', 'Microsoft SharePoint Enterprise Server 2016']
Show details on source website
To clipboard 

{
  "bids": {
    "bid": {
      "bidNumber": "104052"
    }
  },
  "cves": {
    "cve": {
      "cveNumber": "CVE-2018-8161"
    }
  },
  "description": "Microsoft Office 2010 SP2\u7b49\u90fd\u662f\u7f8e\u56fd\u5fae\u8f6f\uff08Microsoft\uff09\u516c\u53f8\u7684\u4ea7\u54c1\u3002Microsoft Office 2010 SP2\u662f\u4e00\u6b3e\u529e\u516c\u8f6f\u4ef6\u5957\u4ef6\u4ea7\u54c1\u3002Word 2007 SP3\u662f\u4e00\u6b3e\u6587\u5b57\u5904\u7406\u8f6f\u4ef6\u3002\r\n\r\nMicrosoft Office\u4e2d\u5b58\u5728\u8fdc\u7a0b\u4ee3\u7801\u6267\u884c\u6f0f\u6d1e\uff0c\u8be5\u6f0f\u6d1e\u6e90\u4e8e\u7a0b\u5e8f\u672a\u80fd\u6b63\u786e\u7684\u5904\u7406\u5185\u5b58\u4e2d\u7684\u5bf9\u8c61\u3002\u8fdc\u7a0b\u653b\u51fb\u8005\u53ef\u901a\u8fc7\u4f7f\u7528\u53d7\u5f71\u54cd\u7684Microsoft Office\u7248\u672c\u6253\u5f00\u7279\u5236\u7684\u6587\u4ef6\u5229\u7528\u8be5\u6f0f\u6d1e\u5728\u5f53\u524d\u7528\u6237\u7684\u4e0a\u4e0b\u6587\u4e2d\u8fd0\u884c\u4efb\u610f\u4ee3\u7801\u3002",
  "discovererName": "Microsoft",
  "formalWay": "\u5382\u5546\u5df2\u53d1\u5e03\u6f0f\u6d1e\u4fee\u590d\u7a0b\u5e8f\uff0c\u8bf7\u53ca\u65f6\u5173\u6ce8\u66f4\u65b0\uff1a\r\nhttps://portal.msrc.microsoft.com/en-US/security-guidance/advisory/CVE-2018-8161",
  "isEvent": "\u901a\u7528\u8f6f\u786c\u4ef6\u6f0f\u6d1e",
  "number": "CNVD-2018-10431",
  "openTime": "2018-05-28",
  "patchDescription": "Microsoft Office 2010 SP2\u7b49\u90fd\u662f\u7f8e\u56fd\u5fae\u8f6f\uff08Microsoft\uff09\u516c\u53f8\u7684\u4ea7\u54c1\u3002Microsoft Office 2010 SP2\u662f\u4e00\u6b3e\u529e\u516c\u8f6f\u4ef6\u5957\u4ef6\u4ea7\u54c1\u3002Word 2007 SP3\u662f\u4e00\u6b3e\u6587\u5b57\u5904\u7406\u8f6f\u4ef6\u3002\r\n\r\nMicrosoft Office\u4e2d\u5b58\u5728\u8fdc\u7a0b\u4ee3\u7801\u6267\u884c\u6f0f\u6d1e\uff0c\u8be5\u6f0f\u6d1e\u6e90\u4e8e\u7a0b\u5e8f\u672a\u80fd\u6b63\u786e\u7684\u5904\u7406\u5185\u5b58\u4e2d\u7684\u5bf9\u8c61\u3002\u8fdc\u7a0b\u653b\u51fb\u8005\u53ef\u901a\u8fc7\u4f7f\u7528\u53d7\u5f71\u54cd\u7684Microsoft Office\u7248\u672c\u6253\u5f00\u7279\u5236\u7684\u6587\u4ef6\u5229\u7528\u8be5\u6f0f\u6d1e\u5728\u5f53\u524d\u7528\u6237\u7684\u4e0a\u4e0b\u6587\u4e2d\u8fd0\u884c\u4efb\u610f\u4ee3\u7801\u3002\u76ee\u524d\uff0c\u4f9b\u5e94\u5546\u53d1\u5e03\u4e86\u5b89\u5168\u516c\u544a\u53ca\u76f8\u5173\u8865\u4e01\u4fe1\u606f\uff0c\u4fee\u590d\u4e86\u6b64\u6f0f\u6d1e\u3002",
  "patchName": "Microsoft Office\u8fdc\u7a0b\u4ee3\u7801\u6267\u884c\u6f0f\u6d1e\uff08CNVD-2018-10431\uff09\u7684\u8865\u4e01",
  "products": {
    "product": [
      "Microsoft Office Web Apps 2010 SP2",
      "Microsoft Word 2010 SP2",
      "Microsoft Office 2010 SP2",
      "Microsoft Word 2013 SP1",
      "Microsoft Word 2013 RT SP1",
      "Microsoft Office Web Apps Server 2013 SP1",
      "Microsoft Word 2016",
      "Microsoft SharePoint Enterprise Server 2016"
    ]
  },
  "referenceLink": "http://www.securityfocus.com/bid/104052",
  "serverity": "\u9ad8",
  "submitTime": "2018-05-10",
  "title": "Microsoft Office\u8fdc\u7a0b\u4ee3\u7801\u6267\u884c\u6f0f\u6d1e\uff08CNVD-2018-10431\uff09"
}


Log in or create an account to share your comment.




Tags
Taxonomy of the tags.




Sightings

Author Source Type Date

Nomenclature

  • Seen: The vulnerability was mentioned, discussed, or observed by the user.
  • Confirmed: The vulnerability has been validated from an analyst's perspective.
  • Published Proof of Concept: A public proof of concept is available for this vulnerability.
  • Exploited: The vulnerability was observed as exploited by the user who reported the sighting.
  • Patched: The vulnerability was observed as successfully patched by the user who reported the sighting.
  • Not exploited: The vulnerability was not observed as exploited by the user who reported the sighting.
  • Not confirmed: The user expressed doubt about the validity of the vulnerability.
  • Not patched: The vulnerability was not observed as successfully patched by the user who reported the sighting.



Detection rules are retrieved from Rulezet.