CVE-2018-8628

🗓️ 12 Dec 2018 00:00:00Reported by microsoftType

Remote code execution vulnerability in Microsoft PowerPoint softwar

Reporter	Title	Published	Views	Family All 36
ATTACKERKB	CVE-2018-8628	12 Dec 201800:29	–	attackerkb
BDU FSTEC	The vulnerability of the Microsoft PowerPoint presentation preparation program arises from an operation that goes beyond buffer boundaries in memory, allowing a hacker to execute arbitrary code in the context of the current user.	28 Dec 201800:00	–	bdu_fstec
CVE	CVE-2018-8628	12 Dec 201800:00	–	cve
Microsoft KB	Description of the security update for PowerPoint Viewer 2007: December 11, 2018	11 Dec 201808:00	–	mskb
Microsoft KB	Description of the security update for SharePoint Server 2010 Office Web Apps: December 11, 2018	11 Dec 201808:00	–	mskb
Microsoft KB	Description of the security update for Office Online Server: December 11, 2018	11 Dec 201808:00	–	mskb
Microsoft KB	Security update 2018-12-11	11 Dec 201808:00	–	mskb
Microsoft KB	Security update 2018-12-11	11 Dec 201808:00	–	mskb
Microsoft KB	Description of the security update for PowerPoint 2013: December 11, 2018	11 Dec 201808:00	–	mskb
Microsoft KB	Description of the security update for PowerPoint 2010: December 11, 2018	11 Dec 201808:00	–	mskb

[
  {
    "product": "Microsoft Office",
    "vendor": "Microsoft",
    "versions": [
      {
        "status": "affected",
        "version": "2016 for Mac"
      },
      {
        "status": "affected",
        "version": "2019 for 32-bit editions"
      },
      {
        "status": "affected",
        "version": "2019 for 64-bit editions"
      },
      {
        "status": "affected",
        "version": "2019 for Mac"
      },
      {
        "status": "affected",
        "version": "Compatibility Pack Service Pack 3"
      },
      {
        "status": "affected",
        "version": "Web Apps 2010 Service Pack 2"
      },
      {
        "status": "affected",
        "version": "Web Apps 2013 Service Pack 1"
      }
    ]
  },
  {
    "product": "Microsoft PowerPoint",
    "vendor": "Microsoft",
    "versions": [
      {
        "status": "affected",
        "version": "2010 Service Pack 2 (32-bit editions)"
      },
      {
        "status": "affected",
        "version": "2010 Service Pack 2 (64-bit editions)"
      },
      {
        "status": "affected",
        "version": "2013 RT Service Pack 1"
      },
      {
        "status": "affected",
        "version": "2013 Service Pack 1 (32-bit editions)"
      },
      {
        "status": "affected",
        "version": "2013 Service Pack 1 (64-bit editions)"
      },
      {
        "status": "affected",
        "version": "2016 (32-bit edition)"
      },
      {
        "status": "affected",
        "version": "2016 (64-bit edition)"
      }
    ]
  },
  {
    "product": "Microsoft SharePoint",
    "vendor": "Microsoft",
    "versions": [
      {
        "status": "affected",
        "version": "Enterprise Server 2016"
      }
    ]
  },
  {
    "product": "Microsoft PowerPoint Viewer",
    "vendor": "Microsoft",
    "versions": [
      {
        "status": "affected",
        "version": "Microsoft PowerPoint Viewer"
      }
    ]
  },
  {
    "product": "Office",
    "vendor": "Microsoft",
    "versions": [
      {
        "status": "affected",
        "version": "365 ProPlus for 32-bit Systems"
      },
      {
        "status": "affected",
        "version": "365 ProPlus for 64-bit Systems"
      }
    ]
  },
  {
    "product": "Office Online Server",
    "vendor": "Microsoft",
    "versions": [
      {
        "status": "affected",
        "version": "Office Online Server"
      }
    ]
  },
  {
    "product": "Microsoft SharePoint Server",
    "vendor": "Microsoft",
    "versions": [
      {
        "status": "affected",
        "version": "2013 Service Pack 1"
      },
      {
        "status": "affected",
        "version": "2019"
      }
    ]
  }
]

Source	Link
securityfocus	www.securityfocus.com/bid/106104
portal	www.portal.msrc.microsoft.com/en-US/security-guidance/advisory/CVE-2018-8628

12 Dec 2018 10:57Current

6.2Medium risk

Vulners AI Score6.2

EPSS0.27526