CVE-2018-8245
published 2018-06-14CVE-2018-8245: A remote code execution vulnerability exists when Microsoft Publisher fails to utilize features that lock down the Local Machine zone when instantiating OLE…
PriorityP348high7.8CVSS 3.0
AVLACLPRNUIRSUCHIHAH
EPSS
16.54%
97.0th percentile
A remote code execution vulnerability exists when Microsoft Publisher fails to utilize features that lock down the Local Machine zone when instantiating OLE objects, aka "Microsoft Publisher Remote Code Execution Vulnerability." This affects Microsoft Publisher.
Affected
6 ranges
| Vendor | Product | Version range | Fixed in |
|---|---|---|---|
| microsoft | microsoft_office | — | — |
| microsoft | microsoft_office_online_server | — | — |
| microsoft | office_online_server | — | — |
| microsoft | office_web_apps | — | — |
| microsoft | publisher | — | — |
| msrc | microsoft_publisher_2010_service_pack_2 | — | — |
CVSS provenance
nvdv3.07.8HIGHCVSS:3.0/AV:L/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H
nvdv2.06.8MEDIUMAV:N/AC:M/Au:N/C:P/I:P/A:P
vendor_msrc7.8HIGH
Stop checking back — get the weekly exploitation signal.
Every Monday: what got weaponized or added to CISA KEV in the last seven days — each CVE cross-linked to its PoC, Nuclei template, and detection rule. Free, one email a week, unsubscribe in one click.
GHSA
GHSA-9635-5wrr-hhvf: An elevation of privilege vulnerability exists when Office Web Apps Server 2013 and Office Online Server fail to properly handle web requests, aka "Mi
ghsa_unreviewed·2022-05-13·CVSS 7.8
CVE-2018-8247 [HIGH] CWE-79 GHSA-9635-5wrr-hhvf: An elevation of privilege vulnerability exists when Office Web Apps Server 2013 and Office Online Server fail to properly handle web requests, aka "Mi
An elevation of privilege vulnerability exists when Office Web Apps Server 2013 and Office Online Server fail to properly handle web requests, aka "Microsoft Office Elevation of Privilege Vulnerability." This affects Microsoft Office, Microsoft Office Online Server. This CVE ID is unique from CVE-2018-8245.
GHSA
GHSA-v2hp-7464-6hp5: A remote code execution vulnerability exists when Microsoft Publisher fails to utilize features that lock down the Local Machine zone when instantiati
ghsa_unreviewed·2022-05-13
CVE-2018-8245 [HIGH] GHSA-v2hp-7464-6hp5: A remote code execution vulnerability exists when Microsoft Publisher fails to utilize features that lock down the Local Machine zone when instantiati
A remote code execution vulnerability exists when Microsoft Publisher fails to utilize features that lock down the Local Machine zone when instantiating OLE objects, aka "Microsoft Publisher Remote Code Execution Vulnerability." This affects Microsoft Publisher.
Microsoft
Microsoft Publisher Remote Code Execution Vulnerability
vendor_msrc·2018-06-12·CVSS 7.8
CVE-2018-8245 [HIGH] Microsoft Publisher Remote Code Execution Vulnerability
Microsoft Publisher Remote Code Execution Vulnerability
Description: A remote code execution vulnerability exists when Microsoft Publisher fails to utilize features that lock down the Local Machine zone when instantiating OLE objects. An attacker who successfully exploited the vulnerability could force arbitrary code to be executed in the Local Machine zone.
To exploit the vulnerability, the attacker could send a specially crafted Publisher document to a victim. The user would then need to open the document in Publisher to trigger the vulnerability.
This update addresses the vulnerability by ensuring that Publisher properly utilizes built-in OS functionality to lock down the Local Machine zone.
Microsoft Office: Microsoft Office
Impact: Remote Code Execution
Exploit Status: Publicly Di
No detection rules found.
No public exploits indexed.
http://www.securityfocus.com/bid/104405http://www.securitytracker.com/id/1041105https://portal.msrc.microsoft.com/en-US/security-guidance/advisory/CVE-2018-8245http://www.securityfocus.com/bid/104405http://www.securitytracker.com/id/1041105https://portal.msrc.microsoft.com/en-US/security-guidance/advisory/CVE-2018-8245
2018-06-14
Published