CVE-2018-1028

State: Published
Severity: Not scored
Published: Apr 12, 2018
Updated: Aug 5, 2024
Reserved: Dec 1, 2017

Description

A remote code execution vulnerability exists when the Office graphics component improperly handles specially crafted embedded fonts, aka "Microsoft Office Graphics Remote Code Execution Vulnerability." This affects Word, Microsoft Office, Microsoft SharePoint, Excel, Microsoft SharePoint Server.

Scores

The record has no CVSS score.

Weaknesses

The record names no weakness.

Affected Products

Product	Versions
WordMicrosoft	Automation Services on Microsoft SharePoint Server 2010 Service Pack 2Affected Automation Services on Microsoft SharePoint Server 2013 Service Pack 1Affected
Microsoft OfficeMicrosoft	2010 Service Pack 2 (32-bit editions)Affected 2010 Service Pack 2 (64-bit editions)Affected 2013 RT Service Pack 1Affected 2013 Service Pack 1 (32-bit editions)Affected 2013 Service Pack 1 (64-bit editions)Affected 2016 (32-bit edition)Affected 2016 (64-bit edition)Affected Web Apps 2010 Service Pack 2Affected Web Apps Server 2013 Service Pack 1Affected
Microsoft SharePointMicrosoft	Enterprise Server 2016Affected
ExcelMicrosoft	Services on Microsoft SharePoint Enterprise Server 2013 Service Pack 1Affected
Microsoft SharePoint ServerMicrosoft	2013 Service Pack 1Affected

References

https://portal.msrc.microsoft.com/en-US/security-guidance/advisory/CVE-2018-1028
1040654vdb-entry
103641vdb-entry

Every record here comes from the CVE Program’s CVE List. © 1999–2026 The MITRE Corporation. CVE is a registered trademark of The MITRE Corporation. The records are reproduced under the CVE Program terms of use.