CVE-2018-0802
HIGH KEVMicrosoft Office Equation Editor - Remote Code Execution via Memory Corruption
Title source: llmExploitation Summary
CVE-2018-0802 is actively exploited and listed in the CISA Known Exploited Vulnerabilities (KEV) catalog, added November 3, 2021. EIP tracks 7 public exploits from researchers including rxwx, Ridter, zldww2011.
AI-analyzed exploit summary This repository contains a Python-based exploit for CVE-2018-0802, which leverages the Packager OLE object to drop and execute a payload via an RTF file. The exploit can also chain CVE-2017-11882 for additional impact.
Description
Equation Editor in Microsoft Office 2007, Microsoft Office 2010, Microsoft Office 2013, and Microsoft Office 2016 allow a remote code execution vulnerability due to the way objects are handled in memory, aka "Microsoft Office Memory Corruption Vulnerability". This CVE is unique from CVE-2018-0797 and CVE-2018-0812.
Exploits (7)
This repository contains a Python-based exploit for CVE-2018-0802, which leverages the Packager OLE object to drop and execute a payload via an RTF file. The exploit can also chain CVE-2017-11882 for additional impact.
This repository contains a Python script that generates malicious RTF files exploiting CVE-2017-11882 and CVE-2018-0802 in Microsoft Office. The exploit leverages a vulnerability in the Equation Editor to achieve remote code execution.
This repository contains a Python script that generates a malicious RTF file exploiting CVE-2018-0802, a vulnerability in Microsoft Equation Editor. The exploit triggers remote code execution by embedding a crafted OLE object in the RTF file.
This repository contains a Python script that generates malicious RTF files exploiting CVE-2017-11882 and CVE-2018-0802 in Microsoft Office Equation Editor. The script embeds arbitrary commands into the RTF file, which execute upon opening in vulnerable versions of Microsoft Office.
This repository contains a writeup discussing malware samples exploiting CVE-2017-11882 and CVE-2018-0802, specifically targeting Microsoft Office files. No exploit code is provided, only a description of the malware and its association with the vulnerabilities.
This repository contains a Python-based PoC exploit for CVE-2018-0802, a Microsoft Office RCE vulnerability. The exploit leverages the Packager OLE object to drop and execute an embedded payload via a crafted RTF file.
This repository contains a functional Python script that generates malicious RTF files exploiting CVE-2018-0802 and CVE-2017-11882. The script embeds OLE objects with crafted Equation Editor data to achieve remote code execution.
References (8)
Scores
CVSS:3.1/AV:L/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H