Security Updates for Microsoft Excel Products (June 2018)

Medium Nessus Plugin ID 110492

Synopsis

The Microsoft Excel Products are missing a security update.

Description

The Microsoft Excel Products are missing a security update.
It is, therefore, affected by the following vulnerability :

- An information disclosure vulnerability exists when Microsoft Excel improperly discloses the contents of its memory. An attacker who exploited the vulnerability could use the information to compromise the users computer or data. (CVE-2018-8246)

Solution

Microsoft has released the following security updates to address this issue:
-KB4022191
-KB4022209
-KB4022174

See Also

http://www.nessus.org/u?0b7ec5ad

http://www.nessus.org/u?4de92d3e

http://www.nessus.org/u?d92f490a

Plugin Details

Severity: Medium

ID: 110492

File Name: smb_nt_ms18_jun_excel.nasl

Version: 1.2

Type: local

Agent: windows

Published: 2018/06/12

Modified: 2018/06/14

Dependencies: 57033, 27524, 13855

Risk Information

Risk Factor: Medium

CVSSv2

Base Score: 4.3

Vector: CVSS2#AV:N/AC:M/Au:N/C:P/I:N/A:N

CVSSv3

Base Score: 4.3

Vector: CVSS:3.0/AV:N/AC:L/PR:N/UI:R/S:U/C:L/I:N/A:N

Vulnerability Information

CPE: cpe:/a:microsoft:excel

Required KB Items: SMB/MS_Bulletin_Checks/Possible

Patch Publication Date: 2018/06/12

Vulnerability Publication Date: 2018/06/12

Reference Information

CVE: CVE-2018-8246

MSKB: 4022191, 4022209, 4022174

MSFT: MS18-4022191, MS18-4022209, MS18-4022174

IAVA: 2018-A-0188