Kaspersky Threats

Detect date

?

01/09/2018

Severity

?

Critical

Description

Multiple serious vulnerabilities have been found in Microsoft Office. Malicious users can exploit these vulnerabilities to execute arbitrary code, spoof user interface and obtain sensitive information.

Below is a complete list of vulnerabilities:

Elevation of privilege vulnerabilities in Microsoft SharePoint Server can be exploited remotely via specially crafted web request to gain privileges or obtain sensitive information;
Improper email parsing vulnerabilities in Microsoft Outlook can be exploited remotely via specially crafted email messages to execute arbitrary code;
Improper memory handling vulnerabilities in Microsoft Word can be exploited remotely to execute arbitrary code;
Improper memory handling vulnerabilities in Microsoft Office software can be exploited remotely to execute arbitrary code;
Improper memory handling vulnerabilities in Microsoft Excel can be exploited remotely to execute arbitrary code;
A memory corruption vulnerability in Microsoft Word can be exploited remotely via specially crafted file to execute arbitrary code;
A XSS vulnerability in Microsoft Access can be exploited remotely via specially crafted file to spoof user interface;
A memory corruption vulnerability in Microsoft Office software can be exploited remotely via specially crafted file to execute arbitrary code;
An email encoding handling vulnerability in Microsoft Outlook for MAC can be exploited remotely via specially crafted email attachment to spoof user interface.

Affected products

Microsoft Excel 2007 Service Pack 3
Microsoft Excel 2010 Service Pack 2
Microsoft Excel 2013 RT Service Pack 1
Microsoft Excel 2013 Service Pack 1
Microsoft Excel 2016
Microsoft Excel 2016 Click-to-Run (C2R)
Microsoft Excel Viewer 2007 Service Pack 3
Microsoft Office 2007 Service Pack 3
Microsoft Office 2010 Service Pack 2
Microsoft Office 2013 RT Service Pack 1
Microsoft Office 2013 Service Pack 1
Microsoft Office 2016
Microsoft Office 2016 Click-to-Run (C2R)
Microsoft Office 2016 for Mac
Microsoft Office Compatibility Pack Service Pack 3
Microsoft Office Online Server 2016
Microsoft Office Web Apps 2010 Service Pack 2
Microsoft Office Web Apps Server 2013 Service Pack 1
Microsoft Office Word Viewer
Microsoft Outlook 2007 Service Pack 3
Microsoft Outlook 2010 Service Pack 2
Microsoft Outlook 2013 RT Service Pack 1
Microsoft Outlook 2013 Service Pack 1
Microsoft Outlook 2016
Microsoft SharePoint Enterprise Server 2013 Service Pack 1
Microsoft SharePoint Enterprise Server 2016
Microsoft SharePoint Foundation 2010 Service Pack 2
Microsoft SharePoint Server 2010 Service Pack 2
Microsoft Word 2007 Service Pack 3
Microsoft Word 2010 Service Pack 2
Microsoft Word 2013 RT Service Pack 1
Microsoft Word 2013 Service Pack 1
Microsoft Word 2016

Solution

Install necessary updates from the KB section, that are listed in your Windows Update (Windows Update usually can be accessed from the Control Panel)

Original advisories

ADV180003
CVE-2018-0789
CVE-2018-0790
CVE-2018-0793
CVE-2018-0791
CVE-2018-0792
CVE-2018-0794
CVE-2018-0795
CVE-2018-0796
CVE-2018-0797
CVE-2018-0798
CVE-2018-0799
CVE-2018-0801
CVE-2018-0802
CVE-2018-0804
CVE-2018-0805
CVE-2018-0806
CVE-2018-0807
CVE-2018-0812
CVE-2018-0819

Detect date ?	01/09/2018
Severity ?	Critical
Description	Multiple serious vulnerabilities have been found in Microsoft Office. Malicious users can exploit these vulnerabilities to execute arbitrary code, spoof user interface and obtain sensitive information. Below is a complete list of vulnerabilities: Elevation of privilege vulnerabilities in Microsoft SharePoint Server can be exploited remotely via specially crafted web request to gain privileges or obtain sensitive information; Improper email parsing vulnerabilities in Microsoft Outlook can be exploited remotely via specially crafted email messages to execute arbitrary code; Improper memory handling vulnerabilities in Microsoft Word can be exploited remotely to execute arbitrary code; Improper memory handling vulnerabilities in Microsoft Office software can be exploited remotely to execute arbitrary code; Improper memory handling vulnerabilities in Microsoft Excel can be exploited remotely to execute arbitrary code; A memory corruption vulnerability in Microsoft Word can be exploited remotely via specially crafted file to execute arbitrary code; A XSS vulnerability in Microsoft Access can be exploited remotely via specially crafted file to spoof user interface; A memory corruption vulnerability in Microsoft Office software can be exploited remotely via specially crafted file to execute arbitrary code; An email encoding handling vulnerability in Microsoft Outlook for MAC can be exploited remotely via specially crafted email attachment to spoof user interface.
Affected products	Microsoft Excel 2007 Service Pack 3 Microsoft Excel 2010 Service Pack 2 Microsoft Excel 2013 RT Service Pack 1 Microsoft Excel 2013 Service Pack 1 Microsoft Excel 2016 Microsoft Excel 2016 Click-to-Run (C2R) Microsoft Excel Viewer 2007 Service Pack 3 Microsoft Office 2007 Service Pack 3 Microsoft Office 2010 Service Pack 2 Microsoft Office 2013 RT Service Pack 1 Microsoft Office 2013 Service Pack 1 Microsoft Office 2016 Microsoft Office 2016 Click-to-Run (C2R) Microsoft Office 2016 for Mac Microsoft Office Compatibility Pack Service Pack 3 Microsoft Office Online Server 2016 Microsoft Office Web Apps 2010 Service Pack 2 Microsoft Office Web Apps Server 2013 Service Pack 1 Microsoft Office Word Viewer Microsoft Outlook 2007 Service Pack 3 Microsoft Outlook 2010 Service Pack 2 Microsoft Outlook 2013 RT Service Pack 1 Microsoft Outlook 2013 Service Pack 1 Microsoft Outlook 2016 Microsoft SharePoint Enterprise Server 2013 Service Pack 1 Microsoft SharePoint Enterprise Server 2016 Microsoft SharePoint Foundation 2010 Service Pack 2 Microsoft SharePoint Server 2010 Service Pack 2 Microsoft Word 2007 Service Pack 3 Microsoft Word 2010 Service Pack 2 Microsoft Word 2013 RT Service Pack 1 Microsoft Word 2013 Service Pack 1 Microsoft Word 2016
Solution	Install necessary updates from the KB section, that are listed in your Windows Update (Windows Update usually can be accessed from the Control Panel)
Original advisories	ADV180003 CVE-2018-0789 CVE-2018-0790 CVE-2018-0793 CVE-2018-0791 CVE-2018-0792 CVE-2018-0794 CVE-2018-0795 CVE-2018-0796 CVE-2018-0797 CVE-2018-0798 CVE-2018-0799 CVE-2018-0801 CVE-2018-0802 CVE-2018-0804 CVE-2018-0805 CVE-2018-0806 CVE-2018-0807 CVE-2018-0812 CVE-2018-0819
Related products	Microsoft Office Microsoft Outlook Microsoft Excel Microsoft Word
CVE-IDS ?	CVE-2018-07899.0Critical CVE-2018-07906.5High CVE-2018-07939.3Critical CVE-2018-07919.3Critical CVE-2018-07929.3Critical CVE-2018-07949.3Critical CVE-2018-07959.3Critical CVE-2018-07969.3Critical CVE-2018-07979.3Critical CVE-2018-07989.3Critical CVE-2018-07994.3Warning CVE-2018-08019.3Critical CVE-2018-08029.3Critical CVE-2018-08049.3Critical CVE-2018-08059.3Critical CVE-2018-08069.3Critical CVE-2018-08079.3Critical CVE-2018-08129.3Critical CVE-2018-08194.3Warning
Microsoft official advisories	Microsoft Security Update Guide
KB list	4011602 4011605 4011627 4011660 4011639 4011606 4011636 4011201 4011622 4011611 4011642 3114998 4011653 4011651 3141547 4011213 4011626 4011273 4011637 4011643 4011607 4011658 4011657 4011659 4011632 4011648 4011615 4011641 4011609 4011579 4011580 4011656 4011574 4011610 4011599
Exploitation	This vulnerability can be exploited by the following malware: https://threats.kaspersky.com/en/threat/Exploit.MSOffice.CVE-2018-0802/ The following public exploits exists for this vulnerability: https://threats.kaspersky.com/en/threat/Exploit.MSOffice.CVE-2018-0802/
	Find out the statistics of the vulnerabilities spreading in your region

KLA11170Multiple vulnerabilities in Microsoft Office

KLA11170
Multiple vulnerabilities in Microsoft Office