VYPR
← All advisories
High severity7.8NVD Advisory· Published Jan 10, 2018· Updated Jun 17, 2026

CVE-2018-0797

CVE-2018-0797

Description

Microsoft Office 2010, Microsoft Office 2013, and Microsoft Office 2016 allow a remote code execution vulnerability due to the way RTF content is handled, aka "Microsoft Word Memory Corruption Vulnerability".

Affected products

19
  • Microsoft/Office3 versions
    cpe:2.3:a:microsoft:office:2010:sp2:*:*:*:*:*:*+ 2 more
    • cpe:2.3:a:microsoft:office:2010:sp2:*:*:*:*:*:*
    • cpe:2.3:a:microsoft:office:2016:*:*:*:*:mac_os_x:*:*
    • (no CPE)
  • Microsoft/Office Compatibility Pack
    cpe:2.3:a:microsoft:office_compatibility_pack:-:sp3:*:*:*:*:*:*
  • Microsoft/Office Online Server
    cpe:2.3:a:microsoft:office_online_server:2016:*:*:*:*:*:*:*
  • Microsoft/Office Web Apps3 versions
    cpe:2.3:a:microsoft:office_web_apps:2010:*:*:*:*:*:*:*+ 2 more
    • cpe:2.3:a:microsoft:office_web_apps:2010:*:*:*:*:*:*:*
    • cpe:2.3:a:microsoft:office_web_apps:2010:sp2:*:*:*:*:*:*
    • cpe:2.3:a:microsoft:office_web_apps_server:2013:sp1:*:*:*:*:*:*
  • Microsoft/Sharepoint Server3 versions
    cpe:2.3:a:microsoft:sharepoint_enterprise_server:2013:sp1:*:*:*:*:*:*+ 2 more
    • cpe:2.3:a:microsoft:sharepoint_enterprise_server:2013:sp1:*:*:*:*:*:*
    • cpe:2.3:a:microsoft:sharepoint_enterprise_server:2016:*:*:*:*:*:*:*
    • cpe:2.3:a:microsoft:sharepoint_server:2010:sp2:*:*:*:*:*:*
  • Microsoft/Word6 versions
    cpe:2.3:a:microsoft:word:2007:sp3:*:*:*:*:*:*+ 5 more
    • cpe:2.3:a:microsoft:word:2007:sp3:*:*:*:*:*:*
    • cpe:2.3:a:microsoft:word:2010:sp2:*:*:*:*:*:*
    • cpe:2.3:a:microsoft:word:2013:sp1:*:*:*:*:*:*
    • cpe:2.3:a:microsoft:word:2013:sp1:*:*:rt:*:*:*
    • cpe:2.3:a:microsoft:word:2016:*:*:*:*:*:*:*
    • (no CPE)
  • Microsoft/Word Viewer
    cpe:2.3:a:microsoft:word_viewer:*:*:*:*:*:*:*:*
  • Microsoft Corporation/Microsoft Officev5
    Range: Microsoft Office

Patches

Vulnerability mechanics

References

3

News mentions

0

No linked articles in our index yet.