CVE-2018-0903: High severity microsoft access 2010 vulnerability

Published Mar 14, 2018

Updated

Microsoft Access 2010 SP2, Microsoft Access 2013 SP1, Microsoft Access 2016, and Microsoft Office 2016 Click-to-Run allow a remote code execution vulnerability due to how objects are handled in memory, aka "Microsoft Access Remote Code Execution Vulnerability".

Affected Software

4 affected components

Microsoft Access=2010-sp2

Microsoft Access=2013-sp1

Microsoft Access=2016

Microsoft Office=2016

Remediation

Patch Available

https://portal.msrc.microsoft.com/en-US/security-guidance/advisory/CVE-2018-0903

Event History

Mar 14, 2018

CVE Published

via MITRE·05:00 PM

Data Sourced

via MITRE·05:00 PM

DescriptionWeakness

Frequently Asked Questions

What is CVE-2018-0903?

CVE-2018-0903 is a remote code execution vulnerability in Microsoft Access 2010 SP2, Microsoft Access 2013 SP1, Microsoft Access 2016, and Microsoft Office 2016 Click-to-Run.

How does CVE-2018-0903 work?

CVE-2018-0903 works by exploiting the way objects are handled in memory, allowing remote code execution.

What is the severity of CVE-2018-0903?

The severity of CVE-2018-0903 is high, with a severity value of 7.8.

Which software versions are affected by CVE-2018-0903?

CVE-2018-0903 affects Microsoft Access 2010 SP2, Microsoft Access 2013 SP1, Microsoft Access 2016, and Microsoft Office 2016 Click-to-Run.

How can I fix CVE-2018-0903?

To fix CVE-2018-0903, it is recommended to apply the necessary security updates provided by Microsoft.