Vulnerabilities > CVE-2018-8579 - Unspecified vulnerability in Microsoft Office and Office 365 Proplus
Attack vector
NETWORK Attack complexity
LOW Privileges required
LOW Confidentiality impact
HIGH Integrity impact
NONE Availability impact
NONE Summary
An information disclosure vulnerability exists when attaching files to Outlook messages, aka "Microsoft Outlook Information Disclosure Vulnerability." This affects Office 365 ProPlus, Microsoft Office. This CVE ID is unique from CVE-2018-8558.
Vulnerable Configurations
| Part | Description | Count |
|---|---|---|
| Application | 2 |
Nessus
| NASL family | Windows : Microsoft Bulletins |
| NASL id | SMB_NT_MS18_NOV_OUTLOOK.NASL |
| description | The Microsoft Outlook application installed on the remote host is missing security updates. It is, therefore, affected by multiple vulnerabilities : - A remote code execution vulnerability exists in the way that Microsoft Outlook parses specially modified rule export files. An attacker who successfully exploited this vulnerability could take control of an affected system. An attacker could then install programs; view, change, or delete data; or create new accounts with full user rights. (CVE-2018-8582) - A remote code execution vulnerability exists in Microsoft Outlook software when it fails to properly handle objects in memory. An attacker who successfully exploited the vulnerability could use a specially crafted file to perform actions in the security context of the current user. For example, the file could then take actions on behalf of the logged-on user with the same permissions as the current user. (CVE-2018-8522, CVE-2018-8524, CVE-2018-8576) |
| last seen | 2020-06-01 |
| modified | 2020-06-02 |
| plugin id | 118928 |
| published | 2018-11-13 |
| reporter | This script is Copyright (C) 2018-2019 and is owned by Tenable, Inc. or an Affiliate thereof. |
| source | https://www.tenable.com/plugins/nessus/118928 |
| title | Security Updates for Outlook (November 2018) |
The Hacker News
| id | THN:FC0A657EEDC66A38CB29C06FB477EEF0 |
| last seen | 2018-11-14 |
| modified | 2018-11-14 |
| published | 2018-11-14 |
| reporter | The Hacker News |
| source | https://thehackernews.com/2018/11/microsoft-patch-tuesday-updates.html |
| title | 63 New Flaws (Including 0-Days) Windows Users Need to Patch Now |
References
- http://www.securityfocus.com/bid/105828
- http://www.securityfocus.com/bid/105828
- http://www.securitytracker.com/id/1042132
- http://www.securitytracker.com/id/1042132
- https://portal.msrc.microsoft.com/en-US/security-guidance/advisory/CVE-2018-8579
- https://portal.msrc.microsoft.com/en-US/security-guidance/advisory/CVE-2018-8579