Test ID:	1.3.6.1.4.1.25623.1.0.814283
Category:	Windows : Microsoft Bulletins
Title:	Microsoft Office 365 (2016 Click-to-Run) Multiple Vulnerabilities (Nov 2018)
Summary:	This host is missing an important security; update according to Microsoft Office Click-to-Run updates.
Description:	Summary: This host is missing an important security update according to Microsoft Office Click-to-Run updates. Vulnerability Insight: Multiple flaws exist due to: - Multiple errors in Microsoft Excel because it fails to properly handle objects in memory. - Multiple errors in Microsoft Outlook software when it fails to properly handle objects in memory. - An error in Microsoft Outlook which fails to respect 'Default link type' settings configured via the SharePoint Online Admin Center. - An error in Microsoft Outlook when attaching files to Outlook messages. - An error in the way that Microsoft Outlook parses specially modified rule export files. - An error in Microsoft Project software when it fails to properly handle objects in memory. - An error in Microsoft Word software when it fails to properly handle objects in memory. - An error in Skype for Business in handling emojis. Vulnerability Impact: Successful exploitation will allow an attacker to run arbitrary code in the context of the current user, conduct a denial-of-service attack and gain access to sensitive information. Affected Software/OS: Microsoft Office 365 (2016 Click-to-Run). Solution: Upgrade to latest version of Microsoft Office 365 (2016 Click-to-Run) with respect to update channel used. Please see the references for more information. CVSS Score: 9.3 CVSS Vector: AV:N/AC:M/Au:N/C:C/I:C/A:C
Cross-Ref:	Common Vulnerability Exposure (CVE) ID: CVE-2018-8574 BugTraq ID: 105833 http://www.securityfocus.com/bid/105833 http://www.securitytracker.com/id/1042115 Common Vulnerability Exposure (CVE) ID: CVE-2018-8577 BugTraq ID: 105834 http://www.securityfocus.com/bid/105834 http://www.securitytracker.com/id/1042134 Common Vulnerability Exposure (CVE) ID: CVE-2018-8522 BugTraq ID: 105820 http://www.securityfocus.com/bid/105820 http://www.securitytracker.com/id/1042110 Common Vulnerability Exposure (CVE) ID: CVE-2018-8524 BugTraq ID: 105823 http://www.securityfocus.com/bid/105823 Common Vulnerability Exposure (CVE) ID: CVE-2018-8558 BugTraq ID: 105826 http://www.securityfocus.com/bid/105826 Common Vulnerability Exposure (CVE) ID: CVE-2018-8576 BugTraq ID: 105822 http://www.securityfocus.com/bid/105822 Common Vulnerability Exposure (CVE) ID: CVE-2018-8579 BugTraq ID: 105828 http://www.securityfocus.com/bid/105828 http://www.securitytracker.com/id/1042132 Common Vulnerability Exposure (CVE) ID: CVE-2018-8582 BugTraq ID: 105825 http://www.securityfocus.com/bid/105825 Common Vulnerability Exposure (CVE) ID: CVE-2018-8575 BugTraq ID: 105807 http://www.securityfocus.com/bid/105807 http://www.securitytracker.com/id/1042116 Common Vulnerability Exposure (CVE) ID: CVE-2018-8539 BugTraq ID: 105835 http://www.securityfocus.com/bid/105835 http://www.securitytracker.com/id/1042112 Common Vulnerability Exposure (CVE) ID: CVE-2018-8573 BugTraq ID: 105836 http://www.securityfocus.com/bid/105836 http://www.securitytracker.com/id/1042114 Common Vulnerability Exposure (CVE) ID: CVE-2018-8546 BugTraq ID: 105802 http://www.securityfocus.com/bid/105802 http://www.securitytracker.com/id/1042125
Copyright	Copyright (C) 2018 Greenbone AG

This is only one of 146377 vulnerability tests in our test suite. Find out more about running a complete security audit. To run a free test of this vulnerability against your system, register below.