PT-2018-1539 · Microsoft · Windows Server 2016+10
Hossein Lotfi
·
Published
2018-09-11
·
Updated
2019-10-03
·
CVE-2018-8332
CVSS v2.0
10
High
| Vector | AV:N/AC:L/Au:N/C:C/I:C/A:C |
Name of the Vulnerable Software and Affected Versions
Windows 7
Microsoft Office
Windows Server 2012 R2
Windows RT 8.1
Windows Server 2008
Windows Server 2008 R2
Windows Server 2012
Windows Server 2016
Windows 8.1
Windows 10
Windows 10 Servers
Description
A remote code execution issue exists due to the improper handling of specially crafted embedded fonts by the Windows font library. This can be exploited by remote attackers to execute arbitrary code, potentially through a specially crafted web page or document.
Recommendations
For Windows 7, apply the necessary patch to fix the issue.
For Microsoft Office, ensure that all security updates are installed to mitigate the risk.
For Windows Server 2012 R2, Windows RT 8.1, Windows Server 2008, Windows Server 2008 R2, Windows Server 2012, Windows Server 2016, Windows 8.1, Windows 10, and Windows 10 Servers, update to the latest version or apply the relevant security patch to resolve the issue.
As a temporary workaround, consider restricting access to potentially vulnerable components until a patch is available.
Fix
Found an issue in the description? Have something to add? Feel free to write us 👾
Weakness Enumeration
Related Identifiers
Affected Products
Office
Windows
Windows 10
Windows 7
Windows 8.1
Windows Rt 8.1
Windows Server 2008
Windows Server 2008 R2
Windows Server 2012
Windows Server 2012 R2
Windows Server 2016