StructuredQuery Remote Code Execution Vulnerability

🗓️ 13 Feb 2018 08:00:00Reported by MicrosoftType

mscve

mscve🔗 msrc.microsoft.com👁 33 Views

StructuredQuery Remote Code Execution Vulnerability. Attackers can run arbitrary code in user context, leading to system control

Reporter	Title	Published	Views	Family All 43
CNVD	Microsoft StructuredQuery Remote Code Execution Vulnerability	26 Feb 201800:00	–	cnvd
Check Point Advisories	Microsoft StructuredQuery Remote Code Execution (CVE-2018-0825)	13 Feb 201800:00	–	checkpoint_advisories
CVE	CVE-2018-0825	15 Feb 201802:00	–	cve
Cvelist	CVE-2018-0825	15 Feb 201802:00	–	cvelist
Microsoft KB	February 13, 2018—KB4074587 (Security-only update)	13 Feb 201808:00	–	mskb
Microsoft KB	February 13, 2018—KB4074588 (OS Build 16299.248)	13 Feb 201808:00	–	mskb
Microsoft KB	February 13, 2018—KB4074589 (Security-only update)	13 Feb 201808:00	–	mskb
Microsoft KB	February 13, 2018—KB4074590 (OS Build 14393.2068)	13 Feb 201808:00	–	mskb
Microsoft KB	February 13, 2018—KB4074591 (OS Build 10586.1417)	13 Feb 201808:00	–	mskb
Microsoft KB	February 13, 2018—KB4074592 (OS Build 15063.909)	13 Feb 201808:00	–	mskb

Vulners

Node

microsoft windows_server_2012_r2_(server_core_installation)

OR

microsoft windows_server_2012_r2_(server_core_installation)

OR

microsoft windows_server_2012_r2

OR

microsoft windows_server_2012_r2

OR

microsoft windows_server_2012_(server_core_installation)

OR

microsoft windows_server_2012_(server_core_installation)

OR

microsoft windows_server_2012

OR

microsoft windows_server_2012

OR

microsoft windows_server_2008_r2_for_x64-based_systems_service_pack_1_(server_core_installation)

OR

microsoft windows_server_2008_r2_for_x64-based_systems_service_pack_1_(server_core_installation)

OR

microsoft windows_server_2008_r2_for_x64-based_systems_service_pack_1

OR

microsoft windows_server_2008_r2_for_x64-based_systems_service_pack_1

OR

microsoft windows_server_2008_r2_for_itanium-based_systems_service_pack_1

OR

microsoft windows_server_2008_r2_for_itanium-based_systems_service_pack_1

OR

microsoft windows_server_2008_for_x64-based_systems_service_pack_2_(server_core_installation)

OR

microsoft windows_server_2008_for_x64-based_systems_service_pack_2

OR

microsoft windows_server_2008_for_itanium-based_systems_service_pack_2

OR

microsoft windows_server_2008_for_32-bit_systems_service_pack_2_(server_core_installation)

OR

microsoft windows_server_2008_for_32-bit_systems_service_pack_2

OR

microsoft windows_rt_8.1

OR

microsoft windows_8.1_for_x64-based_systems

OR

microsoft windows_8.1_for_x64-based_systems

OR

microsoft windows_8.1_for_32-bit_systems

OR

microsoft windows_8.1_for_32-bit_systems

OR

microsoft windows_7_for_x64-based_systems_service_pack_1

OR

microsoft windows_7_for_x64-based_systems_service_pack_1

OR

microsoft windows_7_for_32-bit_systems_service_pack_1

OR

microsoft windows_7_for_32-bit_systems_service_pack_1

OR

microsoft windows_server_2016_(server_core_installation)

OR

microsoft windows_server_2016

OR

microsoft windows_10_version_1607_for_x64-based_systems

OR

microsoft windows_10_version_1607_for_32-bit_systems

OR

microsoft windows_10_version_1511_for_x64-based_systems

OR

microsoft windows_10_version_1511_for_32-bit_systems

OR

microsoft windows_10_for_x64-based_systems

OR

microsoft windows_10_for_32-bit_systems

OR

microsoft windows_10_version_1703_for_x64-based_systems

OR

microsoft windows_10_version_1703_for_32-bit_systems

OR

microsoft windows_10_version_1709_for_x64-based_systems

OR

microsoft windows_10_version_1709_for_32-bit_systems

OR

microsoft windows_server,_version_1709_(server_core_installation)

14 Feb 2018 08:00Current

2.4Low risk

Vulners AI Score2.4

CVSS 37.5 - 8.1

CVSS 27.6

EPSS0.35752

structuredquery remote code execution memory handling user context administrative rights email attack web-based attack security update