Exploit / PoCcritical

Traps Prevents Microsoft Office Equation Editor Zero-Day CVE-2018

Palo Alto Unit 42by Gal De Leon, Maor DokhanianJan 28, 2022 · 21:26 UTC (Jan 28, 2022)2 min read3

Read at unit42.paloaltonetworks.com

Analyze CVE-2017-11882 with Vani AIImpact, affected versions, exploitation, mitigations and detection

CVEs: CVE-2017-11882 CVE-2018-0802

Tags: cve-2017-11882 cve-2018-0802 exploit

Vulnerabilities mentioned

All

CVE	Vulnerability	CVSS	EPSS	Signals	Published
CVE-2017-11882	Memory Corruption RCE in Microsoft Office via Legacy Equation Editor	7.8	100%	KEVRansomwarePoC ×10	Nov 15, 2017 KEV Nov 3, 2021
CVE-2018-0802	Memory Corruption RCE in Microsoft Office Equation Editor	7.8	93%	KEVRansomwarePoC ×3	Jan 10, 2018 KEV Nov 3, 2021

From the original article

2 min read at unit42.paloaltonetworks.com

Last November, Microsoft manually patched a remotely exploitable vulnerability (CVE-2017-11882) in Equation Editor, which is a program that lets you write a mathematical equation into a document. Our Unit 42 research team provided a detailed analysis on this vulnerability here .

Palo Alto Unit 42

By Gal De Leon, Maor Dokhanian · unit42.paloaltonetworks.com

Read the full article at Palo Alto Unit 42

A short excerpt; the article and its images belong to the publisher. Summary, key facts and assessment above are AI-written from the article and can be wrong.