PT-2018-1581 · Microsoft · Windows Server 2016+12

Lucas Leong + 1 · Published 2018-06-05 · Updated 2020-08-24 · CVE-2018-8393

Positive Technologies (AI Summary)

CVSS v2.0

9.3

High

Base vector

AV:N/AC:M/Au:N/C:C/I:C/A:C

Name of the Vulnerable Software and Affected Versions Microsoft JET Database Engine (affected versions not specified) Windows 7 Windows Server 2012 R2 Windows RT 8.1 Windows Server 2008 Windows Server 2012 Windows 8.1 Windows Server 2016 Windows Server 2008 R2 Windows 10 Windows 10 Servers

Description A buffer overflow vulnerability exists in the Microsoft JET Database Engine that could allow remote code execution on an affected system. The vulnerability is caused by a buffer overflow in memory and can be exploited by using a specially crafted Excel file, allowing an attacker to execute arbitrary code. This issue affects various Windows operating systems.

Recommendations For Windows 7, consider applying security updates or patches to resolve the issue. For Windows Server 2012 R2, apply the latest security updates to fix the vulnerability. For Windows RT 8.1, Windows Server 2008, Windows Server 2012, Windows 8.1, Windows Server 2016, Windows Server 2008 R2, Windows 10, and Windows 10 Servers, update to the latest version or apply the relevant security patch to mitigate the risk. As a temporary workaround, consider restricting access to specially crafted Excel files until a patch is available. Avoid using the vulnerable Microsoft JET Database Engine until the issue is resolved.

Fix

Buffer Overflow

Weakness Enumeration

CWE-119

Related Identifiers

BDU:2018-01138

CVE-2018-8393

ZDI-18-1052

Affected Products

Office Excel

Jet Database Engine

Windows

Windows 10

Windows 10 Servers

Windows 7

Windows 8.1

Windows Rt 8.1

Windows Server 2008

Windows Server 2008 R2

Windows Server 2012

Windows Server 2012 R2

Windows Server 2016

References · 9

• https://osv.dev/vulnerability/CVE-2018-8393 · Vendor Advisory
• https://nvd.nist.gov/vuln/detail/CVE-2018-8393 · Security Note
• https://zerodayinitiative.com/advisories/ZDI-18-1052 · Security Note
• http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2018-8393 · Security Note
• https://bdu.fstec.ru/vul/2018-01138 · Security Note
• https://portal.msrc.microsoft.com/en-US/security-guidance/advisory/CVE-2018-8393 · Vendor Advisory
• https://msrc.microsoft.com/update-guide/en-US/advisory/CVE-2018-8393 · Vendor Advisory
• http://securitytracker.com/id/1041625 · Note
• http://securityfocus.com/bid/105214 · Note