Vulnerabilities > CVE-2018-8524 - Unspecified vulnerability in Microsoft products
Attack vector
LOCAL Attack complexity
LOW Privileges required
NONE Confidentiality impact
HIGH Integrity impact
HIGH Availability impact
HIGH Summary
A remote code execution vulnerability exists in Microsoft Outlook software when it fails to properly handle objects in memory, aka "Microsoft Outlook Remote Code Execution Vulnerability." This affects Office 365 ProPlus, Microsoft Office, Microsoft Outlook. This CVE ID is unique from CVE-2018-8522, CVE-2018-8576, CVE-2018-8582.
Vulnerable Configurations
| Part | Description | Count |
|---|---|---|
| Application | 6 |
Nessus
| NASL family | Windows : Microsoft Bulletins |
| NASL id | SMB_NT_MS18_NOV_OUTLOOK.NASL |
| description | The Microsoft Outlook application installed on the remote host is missing security updates. It is, therefore, affected by multiple vulnerabilities : - A remote code execution vulnerability exists in the way that Microsoft Outlook parses specially modified rule export files. An attacker who successfully exploited this vulnerability could take control of an affected system. An attacker could then install programs; view, change, or delete data; or create new accounts with full user rights. (CVE-2018-8582) - A remote code execution vulnerability exists in Microsoft Outlook software when it fails to properly handle objects in memory. An attacker who successfully exploited the vulnerability could use a specially crafted file to perform actions in the security context of the current user. For example, the file could then take actions on behalf of the logged-on user with the same permissions as the current user. (CVE-2018-8522, CVE-2018-8524, CVE-2018-8576) |
| last seen | 2020-06-01 |
| modified | 2020-06-02 |
| plugin id | 118928 |
| published | 2018-11-13 |
| reporter | This script is Copyright (C) 2018-2019 and is owned by Tenable, Inc. or an Affiliate thereof. |
| source | https://www.tenable.com/plugins/nessus/118928 |
| title | Security Updates for Outlook (November 2018) |
The Hacker News
| id | THN:FC0A657EEDC66A38CB29C06FB477EEF0 |
| last seen | 2018-11-14 |
| modified | 2018-11-14 |
| published | 2018-11-14 |
| reporter | The Hacker News |
| source | https://thehackernews.com/2018/11/microsoft-patch-tuesday-updates.html |
| title | 63 New Flaws (Including 0-Days) Windows Users Need to Patch Now |
References
- http://www.securityfocus.com/bid/105823
- http://www.securityfocus.com/bid/105823
- http://www.securitytracker.com/id/1042110
- http://www.securitytracker.com/id/1042110
- https://portal.msrc.microsoft.com/en-US/security-guidance/advisory/CVE-2018-8524
- https://portal.msrc.microsoft.com/en-US/security-guidance/advisory/CVE-2018-8524