HTTP: Microsoft Word CVE-2018-8539 Remote Code Execution
The signature attempts to prevent a know vulnerability in Microsoft Word. Successful exploitation could lead to remote code execution.
Extended Description
A remote code execution vulnerability exists in Microsoft Word software when it fails to properly handle objects in memory, aka "Microsoft Word Remote Code Execution Vulnerability." This affects Microsoft SharePoint Server, Microsoft Office. This CVE ID is unique from CVE-2018-8573.
Affected Products
Microsoft office_web_apps
References
CVE: CVE-2018-8539
Short Name
HTTP:STC:CVE-2018-8539-RC
Severity
Major
Recommended
True
Recommended Action
Drop
Category
HTTP
Keywords
CVE-2018-8539 Code Execution Microsoft Remote Word
Release Date
11/13/2018
Supported Platforms
srx-branch-12.3
srx-19.3
srx-branch-19.3
vsrx3bsd-19.2
srx-branch-19.4
vsrx-19.4
mx-12.3
mx-19.4
vmx-19.4
mx-19.3
vsrx3bsd-19.4
srx-19.4
vsrx-12.3
vmx-19.3
vsrx-19.2
srx-12.3
Sigpack Version
3590
False Positive
Unknown
Vendors
Microsoft
CVSS Score
9.3