Security Updates for Microsoft Excel Products (June 2018)

Medium Nessus Plugin ID 110492

Synopsis

The Microsoft Excel Products are missing a security update.

Description

The Microsoft Excel Products are missing a security update.
It is, therefore, affected by the following vulnerability :

- An information disclosure vulnerability exists when
Microsoft Excel improperly discloses the contents of its
memory. An attacker who exploited the vulnerability
could use the information to compromise the users
computer or data. (CVE-2018-8246)

Solution

Microsoft has released the following security updates to address this issue:
-KB4022191
-KB4022209
-KB4022174

See Also

http://www.nessus.org/u?0b7ec5ad

http://www.nessus.org/u?4de92d3e

http://www.nessus.org/u?d92f490a

Plugin Details

Severity: Medium

ID: 110492

File Name: smb_nt_ms18_jun_excel.nasl

Version: 1.3

Type: local

Agent: windows

Published: 2018/06/12

Modified: 2018/08/16

Dependencies: 13855, 27524, 57033

Risk Information

Risk Factor: Medium

CVSS v2.0

Base Score: 4.3

Vector: CVSS2#AV:N/AC:M/Au:N/C:P/I:N/A:N

CVSS v3.0

Base Score: 4.3

Vector: CVSS:3.0/AV:N/AC:L/PR:N/UI:R/S:U/C:L/I:N/A:N

Vulnerability Information

CPE: cpe:/a:microsoft:excel

Patch Publication Date: 2018/06/12

Vulnerability Publication Date: 2018/06/12

Reference Information

CVE: CVE-2018-8246

MSKB: 4022191, 4022209, 4022174

MSFT: MS18-4022191, MS18-4022209, MS18-4022174