Security Updates for Microsoft Office Viewer Products (June 2018)

Medium Nessus Plugin ID 110493

Synopsis

The Microsoft Office Viewer Products are missing a security update.

Description

The Microsoft Office Viewer Products are missing a security update. It is, therefore, affected by the following vulnerability :

- An information disclosure vulnerability exists when Microsoft Excel improperly discloses the contents of its memory. An attacker who exploited the vulnerability could use the information to compromise the users computer or data. (CVE-2018-8246)

Solution

Microsoft has released KB4022151 to address this issue.

See Also

http://www.nessus.org/u?89d92f75

Plugin Details

Severity: Medium

ID: 110493

File Name: smb_nt_ms18_jun_excel_viewer.nasl

Version: 1.2

Type: local

Agent: windows

Published: 2018/06/12

Modified: 2018/06/14

Dependencies: 57033, 27524, 13855

Risk Information

Risk Factor: Medium

CVSSv2

Base Score: 4.3

Vector: CVSS2#AV:N/AC:M/Au:N/C:P/I:N/A:N

CVSSv3

Base Score: 4.3

Vector: CVSS:3.0/AV:N/AC:L/PR:N/UI:R/S:U/C:L/I:N/A:N

Vulnerability Information

CPE: cpe:/a:microsoft:excel_viewer

Required KB Items: SMB/MS_Bulletin_Checks/Possible

Patch Publication Date: 2018/06/12

Vulnerability Publication Date: 2018/06/12

Reference Information

CVE: CVE-2018-8246

MSKB: 4022151

MSFT: MS18-4022151

IAVA: 2018-A-0188