SB2018111329 - Multiple vulnerabilities in Microsoft Outlook

Description

This security bulletin contains information about 6 secuirty vulnerabilities.

1) Improper input validation (CVE-ID: CVE-2018-8582)

The vulnerability allows a remote attacker to execute arbitrary code on the target system.

The vulnerability exists due to an error when parsing rule export files. A remote attacker can send a specially crafted email message, trick the victim into opening the email and importing an attached .rwz (rule export) file and execute arbitrary code with elevated privileges.

Successful exploitation of the vulnerability may allow an attacker to compromise vulnerable system.

2) Memory corruption (CVE-ID: CVE-2018-8524)

The vulnerability allows a remote attacker to execute arbitrary code on the target system.

The vulnerability exists due to an error when handling objects in memory. A remote attacker can send a specially crafted email message containing malicious file, trick the victim into opening it, trigger memory corruption and execute arbitrary code with elevated privileges.

Successful exploitation of the vulnerability may allow an attacker to compromise vulnerable system.

3) Memory corruption (CVE-ID: CVE-2018-8576)

The vulnerability allows a remote attacker to execute arbitrary code on the target system.

The vulnerability exists due to an error when handling objects in memory. A remote attacker can send a specially crafted email message containing malicious file, trick the victim into opening it, trigger memory corruption and execute arbitrary code with elevated privileges.

Successful exploitation of the vulnerability may allow an attacker to compromise vulnerable system.

4) Memory corruption (CVE-ID: CVE-2018-8522)

The vulnerability allows a remote attacker to execute arbitrary code on the target system.

The vulnerability exists due to an error when handling objects in memory. A remote attacker can send a specially crafted email message containing malicious file, trick the victim into opening it, trigger memory corruption and execute arbitrary code with elevated privileges.

Successful exploitation of the vulnerability may allow an attacker to compromise vulnerable system.

5) Information disclosure (CVE-ID: CVE-2018-8579)

The vulnerability allows a remote attacker to obtain potentially sensitive information on the target system.

The weakness exists due to an error when attaching files to Outlook messages. A remote attacker can attach a file as a link to an email, ignore the default organizational setting and share attached files such that they are accessible by anonymous users where they should be restricted to specific users.

6) Information disclosure (CVE-ID: CVE-2018-8558)

The vulnerability allows a remote attacker to gain access to potentially sensitive information.

The vulnerability exists due to an error when Microsoft Outlook fails to respect "Default link type" settings configured via the SharePoint Online Admin Center. A remote attacker can share anonymously-accessible links to other users via email where these links are intended to be accessed only by specific users.

Remediation

Install update from vendor's website.

References

• https://portal.msrc.microsoft.com/en-US/security-guidance/advisory/CVE-2018-8582
• https://portal.msrc.microsoft.com/en-US/security-guidance/advisory/CVE-2018-8524
• https://portal.msrc.microsoft.com/en-US/security-guidance/advisory/CVE-2018-8576
• https://portal.msrc.microsoft.com/en-US/security-guidance/advisory/CVE-2018-8579
• https://portal.msrc.microsoft.com/en-US/security-guidance/advisory/CVE-2018-8558