Vulnerability Description
The Microsoft Windows Embedded OpenType (EOT) font engine in Microsoft Windows 7 SP1, Windows Server 2008 R2, and Windows Server 2012 allows information disclosure, due to how the Windows EOT font engine handles embedded fonts, aka "Windows EOT Font Engine Information Disclosure Vulnerability". This CVE ID is unique from CVE-2018-0755, CVE-2018-0761, and CVE-2018-0855.
CVSS Score
MEDIUM
Affected Products
| Vendor | Product | Versions |
|---|---|---|
| Microsoft | Windows 7 | All versions |
| Microsoft | Windows Server 2008 | r2 |
| Microsoft | Windows Server 2012 | All versions |
Related Weaknesses (CWE)
References
- http://www.securityfocus.com/bid/102953Third Party AdvisoryVDB Entry
- http://www.securitytracker.com/id/1040374Third Party AdvisoryVDB Entry
- https://portal.msrc.microsoft.com/en-US/security-guidance/advisory/CVE-2018-0760PatchVendor Advisory
- http://www.securityfocus.com/bid/102953Third Party AdvisoryVDB Entry
- http://www.securitytracker.com/id/1040374Third Party AdvisoryVDB Entry
- https://portal.msrc.microsoft.com/en-US/security-guidance/advisory/CVE-2018-0760PatchVendor Advisory
FAQ
What is CVE-2018-0760?
CVE-2018-0760 is a vulnerability with a CVSS score of 5.5 (MEDIUM). The Microsoft Windows Embedded OpenType (EOT) font engine in Microsoft Windows 7 SP1, Windows Server 2008 R2, and Windows Server 2012 allows information disclosure, due to how the Windows EOT font eng...
How severe is CVE-2018-0760?
CVE-2018-0760 has been rated MEDIUM with a CVSS base score of 5.5/10. Review the CVSS metrics above for detailed severity breakdown.
Is there a patch for CVE-2018-0760?
Check the references section above for vendor advisories and patch information. Affected products include: Microsoft Windows 7, Microsoft Windows Server 2008, Microsoft Windows Server 2012.