| Severity | High |
| Patch available | YES |
| Number of vulnerabilities | 1 |
| CVE ID | CVE-2018-0868 |
| CVSSv3 |
8.3 [CVSS:3.0/AV:N/AC:L/PR:N/UI:R/S:C/C:H/I:H/A:H/E:U/RL:O/RC:C] |
| CWE ID |
CWE-427 |
| Exploitation vector | Network |
| Public exploit | N/A |
| Vulnerable software |
Windows Windows Server |
| Vulnerable software versions |
Windows 8.1 Windows 7 Windows 10 Windows RT 8.1 Windows Server 2012 Windows Server 2012 R2 Windows Server 2008 Windows Server 2008 R2 Windows Server 2016 |
| Vendor URL | Microsoft |
The vulnerability allows a remote attacker to compromise vulnerable system.
The vulnerability exists in the Windows Installer due to insecure .dll loading mechanism when opening files. A remote attacker can place a file along with specially crafted .dll file on a remote SBM or WebDAV share, trick the victim into opening it and execute arbitrary code on the target system with privileges of the current victim.
Successful exploitation of the vulnerability may allow an attacker to compromise vulnerable system.
RemediationInstall updates from vendor's website.
External linkshttps://portal.msrc.microsoft.com/en-US/security-guidance/advisory/CVE-2018-0868