CVE-2018-8245 A remote code execution vulnerability exists when Microsoft Publisher fails to utilize features that lock down the Local Machine zone when instantiating OLE objects, aka "Microsoft Publisher Remote Co...
HighCVSS 7.8
EPSS 16.6%
- Published
- Updated
- Exploit status
- No public exploit known
Description
A remote code execution vulnerability exists when Microsoft Publisher fails to utilize features that lock down the Local Machine zone when instantiating OLE objects, aka "Microsoft Publisher Remote Code Execution Vulnerability." This affects Microsoft Publisher.
Affected products
| Product | Affected versions | Fixed in |
|---|---|---|
| Microsoft publisher | = 2010-sp2 | No fix listed |
| Microsoft Publisher | = 2010 Service Pack 2 (32-bit editions) | No fix listed |
| Microsoft Publisher | = 2010 Service Pack 2 (64-bit editions) | No fix listed |
References
- 104405 third-party-advisory vdb-entry
- 1041105 third-party-advisory vdb-entry
- portal.msrc.microsoft.com patch vendor-advisory