← Back

CVE-2018-0986

nvd nist
Published: Apr 4, 2018Modified: Nov 21, 2024

JSON object

Loading...
8.8
Vector
CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H
Exploitability: 2.8 / Impact: 5.9
Source: NVD

Description

A remote code execution vulnerability exists when the Microsoft Malware Protection Engine does not properly scan a specially crafted file, leading to memory corruption, aka "Microsoft Malware Protection Engine Remote Code Execution Vulnerability." This affects Windows Defender, Windows Intune Endpoint Protection, Microsoft Security Essentials, Microsoft System Center Endpoint Protection, Microsoft Exchange Server, Microsoft System Center, Microsoft Forefront Endpoint Protection.

Affected (9)

6 products
Exchange Server
Security Essentials
Intune Endpoint Protection
System Center Endpoint Protection
Windows Defender
Configuration A
3 vulnerable
Vulnerable SoftwareAffected Versions
Microsoft
Version 2013
Version 2016
All versions
Configuration B
5 vulnerable
Configuration C
1 vulnerable · 13 platform
Vulnerable SoftwareAffected Versions
All versions
Running on/withPlatform Versions
Microsoft
Windows 10
All versions
Microsoft
Windows 10
Version 1511
Microsoft
Windows 10
Version 1607
Microsoft
Windows 10
Version 1703
Microsoft
Windows 10
Version 1709
Microsoft
Windows 7
All versions
Microsoft
Windows 8.1
All versions
Microsoft
Windows Rt 8.1
All versions
Microsoft
Windows Server 2008
Version r2 sp1
Microsoft
Windows Server 2012
All versions
Microsoft
Windows Server 2012
Version r2
Microsoft
Windows Server 2016
All versions
Microsoft
Windows Server 2016
Version 1709

References (8)

Source: secure@microsoft.com
Third Party AdvisoryVDB Entry
Source: secure@microsoft.com
Third Party AdvisoryVDB Entry
Source: secure@microsoft.com
ExploitThird Party AdvisoryVDB Entry
Source: af854a3a-2127-422b-91ae-364da2661108
Third Party AdvisoryVDB Entry
Source: af854a3a-2127-422b-91ae-364da2661108
Third Party AdvisoryVDB Entry
Source: af854a3a-2127-422b-91ae-364da2661108
PatchVendor Advisory
Source: af854a3a-2127-422b-91ae-364da2661108
ExploitThird Party AdvisoryVDB Entry

Timeline

No history available yet.