CVE-2018-1028

🗓️ 12 Apr 2018 01:00:00Reported by microsoftType

"CVE-2018-1028 Office Graphics Remote Code Execution Vulnerability

Reporter	Title	Published	Views	Family All 28
CNVD	Microsoft Office Remote Code Execution Vulnerability (CNVD-2018-09646)	16 Apr 201800:00	–	cnvd
Check Point Advisories	Microsoft Office Graphics Remote Code Execution (CVE-2018-1028)	10 Apr 201800:00	–	checkpoint_advisories
Cvelist	CVE-2018-1028	12 Apr 201801:00	–	cvelist
Microsoft KB	Description of the security update for SharePoint Enterprise Server 2013: April 10, 2018	10 Apr 201807:00	–	mskb
Microsoft KB	Description of the security update for Office 2010: April 10, 2018	10 Apr 201807:00	–	mskb
Microsoft KB	Description of the security update for Office 2016: April 10, 2018	10 Apr 201807:00	–	mskb
Microsoft KB	Description of the security update for Office 2013: April 10, 2018	10 Apr 201807:00	–	mskb
Microsoft KB	Description of the security update for SharePoint Enterprise Server 2016: April 10, 2018	10 Apr 201807:00	–	mskb
Microsoft KB	Description of the security update for SharePoint Enterprise Server 2013: April 10, 2018	10 Apr 201807:00	–	mskb
Microsoft KB	Description of the security update for SharePoint Enterprise Server 2013: April 10, 2018	10 Apr 201807:00	–	mskb

NVD

Vulners

Node

microsoft excel_servicesMatch-

microsoft officeMatch2013sp1

microsoft officeMatch2013_rtsp1

microsoft officeMatch2016

microsoft office_2010sp2

microsoft office_web_appsMatch2010sp2

microsoft office_web_appsMatch2013sp1

microsoft sharepoint_enterprise_serverMatch2013sp1

microsoft sharepoint_enterprise_serverMatch2016

microsoft word_automation_servicesMatch-

[
  {
    "product": "Word",
    "vendor": "Microsoft",
    "versions": [
      {
        "status": "affected",
        "version": "Automation Services on Microsoft SharePoint Server 2010 Service Pack 2"
      },
      {
        "status": "affected",
        "version": "Automation Services on Microsoft SharePoint Server 2013 Service Pack 1"
      }
    ]
  },
  {
    "product": "Microsoft Office",
    "vendor": "Microsoft",
    "versions": [
      {
        "status": "affected",
        "version": "2010 Service Pack 2 (32-bit editions)"
      },
      {
        "status": "affected",
        "version": "2010 Service Pack 2 (64-bit editions)"
      },
      {
        "status": "affected",
        "version": "2013 RT Service Pack 1"
      },
      {
        "status": "affected",
        "version": "2013 Service Pack 1 (32-bit editions)"
      },
      {
        "status": "affected",
        "version": "2013 Service Pack 1 (64-bit editions)"
      },
      {
        "status": "affected",
        "version": "2016 (32-bit edition)"
      },
      {
        "status": "affected",
        "version": "2016 (64-bit edition)"
      },
      {
        "status": "affected",
        "version": "Web Apps 2010 Service Pack 2"
      },
      {
        "status": "affected",
        "version": "Web Apps Server 2013 Service Pack 1"
      }
    ]
  },
  {
    "product": "Microsoft SharePoint",
    "vendor": "Microsoft",
    "versions": [
      {
        "status": "affected",
        "version": "Enterprise Server 2016"
      }
    ]
  },
  {
    "product": "Excel",
    "vendor": "Microsoft",
    "versions": [
      {
        "status": "affected",
        "version": "Services on Microsoft SharePoint Enterprise Server 2013 Service Pack 1"
      }
    ]
  },
  {
    "product": "Microsoft SharePoint Server",
    "vendor": "Microsoft",
    "versions": [
      {
        "status": "affected",
        "version": "2013 Service Pack 1"
      }
    ]
  }
]

Source	Link
portal	www.portal.msrc.microsoft.com/en-US/security-guidance/advisory/CVE-2018-1028
securityfocus	www.securityfocus.com/bid/103641
securitytracker	www.securitytracker.com/id/1040654

21 Nov 2024 03:59Current

8.3High risk

Vulners AI Score8.3

CVSS 38.8

CVSS 29.3

EPSS0.33418

CWE-94