CVE Database
/

CVE-2018-8432

Back to search

CVE-2018-8432

Published: Oct 10, 2018

Modified: Aug 5, 2024

PUBLISHED

Description

A remote code execution vulnerability exists in the way that Microsoft Graphics Components handle objects in memory, aka "Microsoft Graphics Components Remote Code Execution Vulnerability." This affects Windows 7, Microsoft Office, Microsoft Office Word Viewer, Office 365 ProPlus, Microsoft Excel Viewer, Microsoft PowerPoint Viewer, Windows Server 2019, Windows Server 2008 R2, Windows 10, Windows Server 2008.

VendorProductVersions

Microsoft

Windows 7

affected
32-bit Systems Service Pack 1
affected
x64-based Systems Service Pack 1

Microsoft

Microsoft Office

affected
2016 for Mac
affected
2019 for 32-bit editions
affected
2019 for 64-bit editions
affected
Compatibility Pack Service Pack 3

Microsoft

Microsoft Office Word Viewer

affected
Microsoft Office Word Viewer

Microsoft

Microsoft Excel Viewer

affected
2007 Service Pack 3

Microsoft

Microsoft PowerPoint Viewer

affected
2007

Microsoft

Windows Server 2019

affected
(Server Core installation)

Microsoft

Office

affected
365 ProPlus for 32-bit Systems
affected
365 ProPlus for 64-bit Systems

Microsoft

Windows Server 2008 R2

affected
Itanium-Based Systems Service Pack 1
affected
x64-based Systems Service Pack 1
affected
x64-based Systems Service Pack 1 (Server Core installation)

Microsoft

Windows 10

affected
Version 1809 for 32-bit Systems
affected
Version 1809 for x64-based Systems

Microsoft

Windows Server 2008

affected
32-bit Systems Service Pack 2
affected
32-bit Systems Service Pack 2 (Server Core installation)
affected
Itanium-Based Systems Service Pack 2
affected
x64-based Systems Service Pack 2
affected
x64-based Systems Service Pack 2 (Server Core installation)

References

105458
vdb-entry
x_refsource_BID
1041823
vdb-entry
x_refsource_SECTRACK

Security Training

Train your team to recognize and prevent security threats with our comprehensive security awareness program.

Start Training

Vulnerability Scanning

Discover vulnerabilities in your applications and infrastructure before attackers do.

Scan Now