Microsoft Outlook 2007, Microsoft Outlook 2010 and Microsoft Outlook 2013 allow a remote code execution vulnerability due to the way email messages are parsed, aka Microsoft Outlook Remote Code Execution Vulnerability. This CVE is unique from CVE-2018-0791.
Affected Software
| Name | Vendor | Start Version | End Version |
|---|---|---|---|
| Office | Microsoft | 2010-sp2 (including) | 2010-sp2 (including) |
| Office | Microsoft | 2016 (including) | 2016 (including) |
| Office | Microsoft | 2016-c2r (including) | 2016-c2r (including) |
| Office_compatibility_pack | Microsoft | –sp3 (including) | –sp3 (including) |
| Word | Microsoft | 2007-sp3 (including) | 2007-sp3 (including) |
| Word | Microsoft | 2010-sp2 (including) | 2010-sp2 (including) |
| Word | Microsoft | 2013-sp1 (including) | 2013-sp1 (including) |
| Word | Microsoft | 2016 (including) | 2016 (including) |
References
- http://www.securityfocus.com/bid/102375
- http://www.securitytracker.com/id/1040154
- https://portal.msrc.microsoft.com/en-US/security-guidance/advisory/CVE-2018-0793
- http://www.securityfocus.com/bid/102375
- http://www.securitytracker.com/id/1040154
- https://portal.msrc.microsoft.com/en-US/security-guidance/advisory/CVE-2018-0793