[Forgot Password]
Login  Register Subscribe

30430

 
 

423868

 
 

247768

 
 

909

 
 

194555

 
 

282

Paid content will be excluded from the download.


Download | Alert*
CVE
view JSON

CVE-2018-8310Date: (C)2018-07-12   (M)2023-12-22


A tampering vulnerability exists when Microsoft Outlook does not properly handle specific attachment types when rendering HTML emails, aka "Microsoft Office Tampering Vulnerability." This affects Microsoft Word, Microsoft Office.

CVSS Score and Metrics +CVSS Score and Metrics -

CVSS V3 Severity:CVSS V2 Severity:
CVSS Score : 7.5CVSS Score : 5.0
Exploit Score: 3.9Exploit Score: 10.0
Impact Score: 3.6Impact Score: 2.9
 
CVSS V3 Metrics:CVSS V2 Metrics:
Attack Vector: NETWORKAccess Vector: NETWORK
Attack Complexity: LOWAccess Complexity: LOW
Privileges Required: NONEAuthentication: NONE
User Interaction: NONEConfidentiality: NONE
Scope: UNCHANGEDIntegrity: PARTIAL
Confidentiality: NONEAvailability: NONE
Integrity: HIGH 
Availability: NONE 
  
Reference:
SECTRACK-1041274
BID-104615
https://portal.msrc.microsoft.com/en-US/security-guidance/advisory/CVE-2018-8310

CPE    5
cpe:/a:microsoft:word:2016
cpe:/a:microsoft:word:2010:sp2
cpe:/a:microsoft:word:2013:sp1
cpe:/a:microsoft:word:2013:sp1:~~rt~~~
...
OVAL    4
oval:org.secpod.oval:def:46360
oval:org.secpod.oval:def:46426
oval:org.secpod.oval:def:46425
oval:org.secpod.oval:def:46428
...

© SecPod Technologies