CVE-2018-0950
En bref Sévérité Non disponible EPSS EPSS 8.93 % · centile 95 (2026-10-27) État PUBLISHED Publiée 2018-04-12 Mise à jour 2024-08-05 Attribuée par microsoft Statut NVD Modified Description An information disclosure vulnerability exists when Office renders Rich Text Format (RTF) email messages containing OLE objects when a message is opened or previewed, aka "Microsoft Office Information Disclosure Vulnerability." This affects Microsoft Word, Microsoft Office. This CVE ID is unique from CVE-2018-1007.
Scores Version Score Vecteur Évalué par CVSS 3.0 MEDIUM 6.5 CVSS:3.0/AV:N/AC:L/PR:N/UI:R/S:U/C:H/I:N/A:N NVD · nvd@nist.gov (Primary) CVSS 2.0 MEDIUM 4.3 AV:N/AC:M/Au:N/C:P/I:N/A:N NVD · nvd@nist.gov (Primary)
Références européennes
Avis du CERT-FR
Configurations affectées (CPE NVD) cpe:2.3:a:microsoft:office:2010:sp2:*:*:*:*:*:*cpe:2.3:a:microsoft:office:2016:*:*:*:click-to-run:*:*:*cpe:2.3:a:microsoft:office_compatibility_pack:-:sp3:*:*:*:*:*:*cpe:2.3:a:microsoft:word:2007:sp3:*:*:*:*:*:*cpe:2.3:a:microsoft:word:2010:sp2:*:*:*:*:*:*cpe:2.3:a:microsoft:word:2013:sp1:*:*:*:*:*:*cpe:2.3:a:microsoft:word:2013:sp1:*:*:rt:*:*:*cpe:2.3:a:microsoft:word:2016:*:*:*:*:*:*:*Produits affectés Produit Versions Microsoft · Microsoft Word affected 2007 Service Pack 3 ; affected 2010 Service Pack 2 (32-bit editions) ; affected 2010 Service Pack 2 (64-bit editions) ; affected 2013 RT Service Pack 1 ; affected 2013 Service Pack 1 (32-bit editions) ; affected 2013 Service Pack 1 (64-bit editions) Microsoft · Microsoft Office affected 2010 Service Pack 2 (32-bit editions) ; affected 2010 Service Pack 2 (64-bit editions) ; affected 2016 Click-to-Run (C2R) for 32-bit editions ; affected 2016 Click-to-Run (C2R) for 64-bit editions ; affected Compatibility Pack Service Pack 3
Références
Sources
