CVE-2018-1028

Published: Apr 12, 2018Modified: Nov 21, 2024

8.8

Vector

CVSS:3.0/AV:N/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H

Exploitability: 2.8 / Impact: 5.9

Source: NVD

Description

A remote code execution vulnerability exists when the Office graphics component improperly handles specially crafted embedded fonts, aka "Microsoft Office Graphics Remote Code Execution Vulnerability." This affects Word, Microsoft Office, Microsoft SharePoint, Excel, Microsoft SharePoint Server.

Affected (10)

Products: Microsoft: Excel Services, Office, Office 2010, Office Web Apps, Sharepoint Enterprise Server, Word Automation Services

6 products

Sharepoint Enterprise Server

Word Automation Services

Configuration A

10 vulnerable

Vulnerable Software	Affected Versions
Microsoft Excel Services	All versions
Microsoft Office	Version 2013 sp1
Microsoft Office	Version 2013_rt sp1
Microsoft Office	Version 2016
Microsoft Office 2010	All versions
Microsoft Office Web Apps	Version 2010 sp2
Microsoft Office Web Apps	Version 2013 sp1
Microsoft Sharepoint Enterprise Server	Version 2013 sp1
Microsoft Sharepoint Enterprise Server	Version 2016
Microsoft Word Automation Services	All versions