First published: Wed Jan 10 2018(Updated: )
Microsoft Office 2016 for Mac allows an attacker to send a specially crafted email attachment to a user in an attempt to launch a social engineering attack, such as phishing, due to how Outlook for Mac displays encoded email addresses, aka "Spoofing Vulnerability in Microsoft Office for Mac."
Credit: secure@microsoft.com
Affected Software | Affected Version | How to fix |
---|---|---|
Microsoft Office for Mac OS X | =2016 |
Sign up to SecAlerts for real-time vulnerability data matched to your software, aggregated from hundreds of sources.
CVE-2018-0819 is considered a medium severity vulnerability.
To mitigate CVE-2018-0819, ensure that you apply the latest security updates and patches provided by Microsoft for Office 2016 on Mac.
CVE-2018-0819 is associated with social engineering attacks, including phishing attempts.
CVE-2018-0819 affects Microsoft Office 2016 for Mac.
The primary issue caused by CVE-2018-0819 is the improper display of encoded email addresses in Outlook for Mac, leading to possible spoofing.