CVE-2018-8245: High severity Microsoft Publisher vulnerability

Published Jun 14, 2018

Updated

A remote code execution vulnerability exists when Microsoft Publisher fails to utilize features that lock down the Local Machine zone when instantiating OLE objects, aka "Microsoft Publisher Remote Code Execution Vulnerability." This affects Microsoft Publisher.

Affected Software

1 affected component

Microsoft Publisher=2010-sp2

Remediation

Patch Available

https://portal.msrc.microsoft.com/en-US/security-guidance/advisory/CVE-2018-8245

Event History

Jun 14, 2018

CVE Published

via MITRE·12:00 PM

Data Sourced

via MITRE·12:00 PM

DescriptionWeakness

Data Sourced

via NVD·12:29 PM

RemedyDescriptionSeverityAffected Software

Frequently Asked Questions

What is CVE-2018-8245?

CVE-2018-8245 is a remote code execution vulnerability in Microsoft Publisher.

How does the vulnerability in CVE-2018-8245 occur?

The vulnerability in CVE-2018-8245 occurs when Microsoft Publisher fails to utilize features that lock down the Local Machine zone when instantiating OLE objects.

What is the severity level of CVE-2018-8245?

The severity level of CVE-2018-8245 is high, with a severity value of 7.8.

Which version of Microsoft Publisher is affected by CVE-2018-8245?

CVE-2018-8245 affects Microsoft Publisher 2010 with Service Pack 2 (SP2).

How can I find more information about CVE-2018-8245?

You can find more information about CVE-2018-8245 on the following references: [SecurityFocus](http://www.securityfocus.com/bid/104405), [SecurityTracker](http://www.securitytracker.com/id/1041105), and [Microsoft Security Advisory](https://portal.msrc.microsoft.com/en-US/security-guidance/advisory/CVE-2018-8245).