CVE-2018-8427HighCVSS 4.7

Microsoft Graphics Components Information Disclosure Vulnerability

Published
October 9, 2018
Last Modified
—

🔗 CVE IDs covered (1)

CVE-2018-8427 →

📋 Description

An information disclosure vulnerability exists in the way that Microsoft Graphics Components handle objects in memory. An attacker who successfully exploited the vulnerability could obtain information that could be useful for further exploitation. To exploit the vulnerability, a user would have to open a specially crafted file. The security update addresses the vulnerability by correcting how Microsoft Graphics Components handle objects in memory.

🎯 Affected products14

  • Microsoft Excel Viewer 2007 Service Pack 3
  • Microsoft Office 2016 for Mac
  • Microsoft Office 2019 for 32-bit editions
  • Microsoft Office 2019 for 64-bit editions
  • Microsoft Office Compatibility Pack Service Pack 3
  • Microsoft Office Word Viewer
  • Microsoft PowerPoint Viewer 2007
  • Office 365 ProPlus for 32-bit Systems
  • Office 365 ProPlus for 64-bit Systems
  • Windows Server 2008 for 32-bit Systems Service Pack 2
  • Windows Server 2008 for 32-bit Systems Service Pack 2 (Server Core installation)
  • Windows Server 2008 for Itanium-Based Systems Service Pack 2
  • Windows Server 2008 for x64-based Systems Service Pack 2
  • Windows Server 2008 for x64-based Systems Service Pack 2 (Server Core installation)

✅ Remediation

KBRelease Notes (Security Update) KB4092444 (Security Update) KB4092464 (Security Update) KB4463097 (Monthly Rollup) KB4463104 (Security Only) KBClick to Run (Security Update)

🔗 References (6)