Security Updates for Microsoft Publisher Products (June 2018)
High Nessus Plugin ID 110500
SynopsisThe Microsoft Publisher Products are missing a security update.
DescriptionThe Microsoft Publisher Products are missing a security
update. It is, therefore, affected by the following
- An elevation of privilege vulnerability exists when
Microsoft Publisher fails to utilize features that lock
down the Local Machine zone when instantiating OLE
objects. An attacker who successfully exploited the
vulnerability could force arbitrary code to be executed
in the Local Machine zone. (CVE-2018-8245)
SolutionMicrosoft has released KB4011186 to address this issue.