CVE-2018-0761: Infoleak

Published Feb 15, 2018

Updated

The Microsoft Windows Embedded OpenType (EOT) font engine in Microsoft Windows 7 SP1 and Windows Server 2008 R2 allows information disclosure, due to how the Windows EOT font engine handles embedded fonts, aka "Windows EOT Font Engine Information Disclosure Vulnerability". This CVE ID is unique from CVE-2018-0755, CVE-2018-0760, and CVE-2018-0855.

Affected Software

2 affected components

Microsoft Windows 7=sp1

Microsoft Windows Server 2008=r2

Remediation

Patch Available

https://portal.msrc.microsoft.com/en-US/security-guidance/advisory/CVE-2018-0761

Event History

Feb 15, 2018

CVE Published

via MITRE·02:00 AM

Data Sourced

via MITRE·02:00 AM

DescriptionWeakness

Frequently Asked Questions

What is the severity of CVE-2018-0761?

CVE-2018-0761 is classified as a moderate severity vulnerability.

How does CVE-2018-0761 affect Windows 7 SP1 and Windows Server 2008 R2?

CVE-2018-0761 allows for potential information disclosure due to flaws in how the Windows EOT font engine handles embedded fonts.

How do I fix CVE-2018-0761?

The recommended fix for CVE-2018-0761 is to apply the latest security updates from Microsoft for affected Windows versions.

Is CVE-2018-0761 being actively exploited?

There is no public indication that CVE-2018-0761 is actively being exploited in the wild.

What systems are impacted by CVE-2018-0761?

CVE-2018-0761 impacts Microsoft Windows 7 SP1 and Windows Server 2008 R2.