CVE-2018-0798

CVE-2018-0798 is actively exploited and listed in the CISA Known Exploited Vulnerabilities (KEV) catalog, added November 3, 2021. EIP tracks 1 public exploit from researchers including Sunqiz.

AI-analyzed exploit summary This repository provides a detailed technical analysis of CVE-2018-0798, a stack-based buffer overflow vulnerability in Microsoft Office's EQNEDT32.EXE component. It includes root cause analysis, dynamic debugging insights, and a breakdown of the exploit mechanism, demonstrating how controlled input leads to arbitrary code execution.

Equation Editor in Microsoft Office 2007, Microsoft Office 2010, Microsoft Office 2013, and Microsoft Office 2016 allows a remote code execution vulnerability due to the way objects are handled in memory, aka "Microsoft Office Memory Corruption Vulnerability".