Microsoft Office CVE-2018-0798
HIGHCVSS VectorNVD
CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H
Lifecycle Timeline
4DescriptionNVD
Equation Editor in Microsoft Office 2007, Microsoft Office 2010, Microsoft Office 2013, and Microsoft Office 2016 allows a remote code execution vulnerability due to the way objects are handled in memory, aka "Microsoft Office Memory Corruption Vulnerability".
AnalysisAI
Microsoft Office 2007 through 2016 Equation Editor contains a memory corruption vulnerability enabling remote code execution through crafted documents, a companion exploit to CVE-2017-11882 targeting the same legacy component.
Technical ContextAI
The CWE-787 out-of-bounds write in EQNEDT32.EXE is triggered by a different code path than CVE-2017-11882 but exploits the same unprotected binary. The lack of ASLR, DEP, and stack cookies makes exploitation trivially reliable.
Affected ProductsAI
Microsoft Office 2007 SP3 Microsoft Office 2010 SP2 Microsoft Office 2013 SP1 Microsoft Office 2016
RemediationAI
Apply Microsoft security update. Remove EQNEDT32.EXE from Office installations. The component is unnecessary for modern document workflows.
Share
External POC / Exploit Code
Leaving vuln.today