CVE-2018-0755

The Microsoft Windows Embedded OpenType (EOT) font engine in Microsoft Windows 7 SP1 and Windows Server 2008 R2 allows information disclosure, due to how the Windows EOT font engine handles embedded fonts, aka "Windows EOT Font Engine Information Disclosure Vulnerability". This CVE ID is unique from CVE-2018-0760, CVE-2018-0761, and CVE-2018-0855.

Score

CVSS 3.0 5.5 Medium

Status

Modified - secure@microsoft.com

Published

2018-02-15

Last modified

2024-09-17

Weaknesses

CWE-200

Affected products

• Windows 7 (Microsoft)
• Windows Server 2008 (Microsoft)
• Microsoft Windows Embedded Opentype Eot Font Engine (Microsoft Corporation)

References

• http://www.securityfocus.com/bid/102934
• http://www.securitytracker.com/id/1040374
• https://portal.msrc.microsoft.com/en-US/security-guidance/advisory/CVE-2018-0755