RULE(RULE ID:711329)

Rule General Information
Release Date: 2018-01-22
Rule Name: Microsoft Office EQNEDT32 MATRIX Stack Buffer Overflow Vulnerability (CVE-2018-0802)
Severity:
CVE ID:
Rule Protection Details
Description: Equation Editor in Microsoft Office 2007, Microsoft Office 2010, Microsoft Office 2013, and Microsoft Office 2016 allow a remote code execution vulnerability due to the way objects are handled in memory, aka "Microsoft Office Memory Corruption Vulnerability".
Impact: A buffer overflow vulnerability can be triggered by an attacker in the context of the vulnerable product. Further attacks includes arbitrary code execution and denial of service.
Affected OS: Windows
Reference: SecurityFocusBID:102347
SecurityTrackerID:1040153
https://github.com/rxwx/CVE-2018-0802
https://portal.msrc.microsoft.com/en-US/security-guidance/advisory/CVE-2018-0802
Solutions
Microsoft has issued a fix on the official website. For more advisory, please visit: https://portal.msrc.microsoft.com/en-US/security-guidance/advisory/CVE-2018-0802