high8.8
CVE-2018-1028
A remote code execution vulnerability exists when the Office graphics component improperly handles specially crafted embedded fonts, aka "Microsoft Office Grap…
Impact
A remote code execution vulnerability exists when the Office graphics component improperly handles specially crafted embedded fonts, aka "Microsoft Office Graphics Remote Code Execution Vulnerability." This affects Word, Microsoft Office, Microsoft SharePoint, Excel, Microsoft SharePoint Server.
Affected products
| Vendor | Product | Affected versions |
|---|---|---|
| Microsoft | Excel Services | All versions |
| Microsoft | Office | Versions 2013, 2013_rt, 2016 |
| Microsoft | Office 2010 | All versions |
| Microsoft | Office Web Apps | Versions 2010, 2013 |
| Microsoft | Sharepoint Enterprise Server | Versions 2013, 2016 |
| Microsoft | Word Automation Services | All versions |
Weakness classification
References
- NVD record
- CVE.org record
- http://www.securityfocus.com/bid/103641
- http://www.securitytracker.com/id/1040654
- https://portal.msrc.microsoft.com/en-US/security-guidance/advisory/CVE-2018-1028
- http://www.securityfocus.com/bid/103641
- http://www.securitytracker.com/id/1040654
- https://portal.msrc.microsoft.com/en-US/security-guidance/advisory/CVE-2018-1028