A remote code execution vulnerability exists when the Office graphics component improperly handles specially crafted embedded fonts, aka "Microsoft Office Graphics Remote Code Execution Vulnerability." This affects Word, Microsoft Office, Microsoft SharePoint, Excel, Microsoft SharePoint Server.

The Microsoft SharePoint Server installation on the remote host is missing security updates.
It is, therefore, affected by multiple vulnerabilities :

  - An elevation of privilege vulnerability exists when     Microsoft SharePoint Server does not properly sanitize     a specially crafted web request to an affected     SharePoint server. An authenticated attacker could     exploit the vulnerability by sending a specially     crafted request to an affected SharePoint server.
    (CVE-2018-1005)

  - An elevation of privilege vulnerability exists when     Microsoft SharePoint Server does not properly sanitize     a specially crafted web request to an affected     SharePoint server. An authenticated attacker could     exploit the vulnerability by sending a specially     crafted URL to a user of an affected SharePoint     server. (CVE-2018-1014)

  - A remote code execution vulnerability exists when the     Office graphics component improperly handles specially     crafted embedded fonts. An attacker who successfully     exploited this vulnerability could take control of the     affected system. An attacker could then install     programs; view, change, or delete data; or create new     accounts with full user rights. Users whose accounts     are configured to have fewer user rights on the system     could be less impacted than users who operate with     administrative user rights. (CVE-2018-1028)

  - An elevation of privilege vulnerability exists when     Microsoft SharePoint Server does not properly sanitize     a specially crafted web request to an affected     SharePoint server. An authenticated attacker could     exploit the vulnerability by sending a specially     crafted request to an affected SharePoint server.
    (CVE-2018-1032)

  - An elevation of privilege vulnerability exists when     Microsoft SharePoint Server does not properly sanitize     a specially crafted web request to an affected     SharePoint server. An authenticated attacker could     exploit the vulnerability by sending a specially     crafted request to an affected SharePoint server.
    (CVE-2018-1034)

The Microsoft Office Web Apps installation on the remote host is missing a security update. It is, therefore, affected by the following vulnerability :

  - A remote code execution vulnerability exists when the     Office graphics component improperly handles specially     crafted embedded fonts. An attacker who successfully     exploited this vulnerability could take control of the     affected system. An attacker could then install     programs; view, change, or delete data; or create new     accounts with full user rights.  (CVE-2018-1028)

The Microsoft Office Products are missing security updates.
It is, therefore, affected by multiple vulnerabilities :

  - An information disclosure vulnerability exists when     Microsoft Office improperly discloses the contents of     its memory. An attacker who exploited the vulnerability     could use the information to compromise the users     computer or data.  (CVE-2018-1007)

  - An information disclosure vulnerability exists when     Office renders Rich Text Format (RTF) email messages     containing OLE objects when a message is opened or     previewed. This vulnerability could potentially result     in the disclosure of sensitive information to a     malicious site.  (CVE-2018-0950)

  - A remote code execution vulnerability exists in     Microsoft Office software when the software fails to     properly handle objects in memory. An attacker who     successfully exploited the vulnerability could run     arbitrary code in the context of the current user. If     the current user is logged on with administrative user     rights, an attacker could take control of the affected     system. An attacker could then install programs; view,     change, or delete data; or create new accounts with full     user rights.  (CVE-2018-1026, CVE-2018-1030)

  - A remote code execution vulnerability exists when the     Office graphics component improperly handles specially     crafted embedded fonts. An attacker who successfully     exploited this vulnerability could take control of the     affected system. An attacker could then install     programs; view, change, or delete data; or create new     accounts with full user rights.  (CVE-2018-1028)

ID	Name	Product	Family	Severity
109036	Security Updates for Microsoft SharePoint Server (April 2018)	Nessus	Windows : Microsoft Bulletins	high
108974	Security Updates for Microsoft Office Web Apps (April 2018)	Nessus	Windows : Microsoft Bulletins	high
108972	Security Updates for Microsoft Office Products (April 2018)	Nessus	Windows : Microsoft Bulletins	high

Detections

Analytics

CVE-2018-1028

high

Tenable Plugins

high

high

high