CVE-2018-1028 A remote code execution vulnerability exists when the Office graphics component improperly handles specially crafted embedded fonts, aka "Microsoft Office Graphics Remote Code Execution Vulnerability....
HighCVSS 8.8
EPSS 18.9%
- Published
- Updated
- Exploit status
- No public exploit known
Description
A remote code execution vulnerability exists when the Office graphics component improperly handles specially crafted embedded fonts, aka "Microsoft Office Graphics Remote Code Execution Vulnerability." This affects Word, Microsoft Office, Microsoft SharePoint, Excel, Microsoft SharePoint Server.
Affected products
| Product | Affected versions | Fixed in |
|---|---|---|
| Microsoft excel services | All versions | No fix listed |
| Microsoft office | = 2013-sp1 | No fix listed |
| Microsoft office | = 2013_rt-sp1 | No fix listed |
| Microsoft office | = 2016 | No fix listed |
| Microsoft office 2010 | All versions | No fix listed |
| Microsoft office web apps | = 2010-sp2 | No fix listed |
| Microsoft office web apps | = 2013-sp1 | No fix listed |
| Microsoft sharepoint enterprise server | = 2013-sp1 | No fix listed |
| Microsoft sharepoint enterprise server | = 2016 | No fix listed |
| Microsoft word automation services | All versions | No fix listed |
| Microsoft word | = Automation Services on Microsoft SharePoint Server 2010 Service Pack 2 | No fix listed |
| Microsoft word | = Automation Services on Microsoft SharePoint Server 2013 Service Pack 1 | No fix listed |
| Microsoft Office | = 2010 Service Pack 2 (32-bit editions) | No fix listed |
| Microsoft Office | = 2010 Service Pack 2 (64-bit editions) | No fix listed |
| Microsoft Office | = 2013 RT Service Pack 1 | No fix listed |
| Microsoft Office | = 2013 Service Pack 1 (32-bit editions) | No fix listed |
| Microsoft Office | = 2013 Service Pack 1 (64-bit editions) | No fix listed |
| Microsoft Office | = 2016 (32-bit edition) | No fix listed |
| Microsoft Office | = 2016 (64-bit edition) | No fix listed |
| Microsoft Office | = Web Apps 2010 Service Pack 2 | No fix listed |
| Microsoft Office | = Web Apps Server 2013 Service Pack 1 | No fix listed |
| Microsoft SharePoint | = Enterprise Server 2016 | No fix listed |
| Microsoft excel | = Services on Microsoft SharePoint Enterprise Server 2013 Service Pack 1 | No fix listed |
| Microsoft SharePoint Server | = 2013 Service Pack 1 | No fix listed |
References
- 103641 third-party-advisory vdb-entry
- 1040654 third-party-advisory vdb-entry
- portal.msrc.microsoft.com patch vendor-advisory