CVE:CVE-2018-8504
CNNVD:CNNVD-201810-315
Microsoft Word是美国微软（Microsoft）公司Office套件中的一款文字处理软件。
Microsoft Word中存在远程代码执行漏洞，该漏洞源于软件未能妥当地处理Protected View中的对象。远程攻击者可利用该漏洞在当前用户的上下文中运行任意代码。以下产品和版本受到影响：Microsoft Word 2016，Word 2013 SP1，Word 2013 RT SP1，Word 2010 SP2；Office 365 ProPlus，Office 2019，Office 2016，Office 2013 SP1，Office 2013 RT，Office 2010 SP2。
solution:Upgrade microsoft office to a higher version than 2010:sp2,2013:sp1,2016,2019,and avoid the version 2010:sp2,2013:sp1,2016,2019; Upgrade microsoft office_365_proplus to a higher version than -; Upgrade microsoft office_web_apps to a higher version than 2010:sp2,and avoid the version 2010:sp2; Upgrade microsoft sharepoint_server to a higher version than 2010:sp2,and avoid the version 2010:sp2; Upgrade microsoft word to a higher version than 2010:sp2,2013:sp1,2016,and avoid the version 2010:sp2,2013:sp1,2016