CVE:CVE-2018-1028
CNNVD:CNNVD-201804-626
Microsoft Excel Services等都是美国微软（Microsoft）公司的产品。Microsoft Excel Services是一套运行于企业业务协作平台用来加载、计算和显示Microsoft Excel的服务应用程序。Office 2010 SP2是一套办公软件套件产品。Office graphics是其中的一个图形组件。
Microsoft Office graphics组件中存在远程代码执行漏洞，该漏洞源于程序没有正确的处理特制的嵌入字体。远程攻击者可利用该漏洞在用户系统上执行任意代码。以下产品和版本受到影响：Microsoft Excel Services；Microsoft Office 2010 SP2，Microsoft Office 2013 RT SP1，Microsoft Office 2013 SP1，Microsoft Office 2016；Microsoft Office Web Apps 2010 SP2，Microsoft Office Web Apps Server 2013 SP1，Microsoft SharePoint Enterprise Server 2016，Microsoft SharePoint Server 2013 SP1；Word Automation Services。
solution:Upgrade microsoft excel_services to a higher version than -; Upgrade microsoft office to a higher version than 2013:sp1,2013_rt:sp1,2016,and avoid the version 2013:sp1,2013_rt:sp1,2016; Upgrade microsoft office_2010 to a higher version than *:sp2,and avoid the version *:sp2; Upgrade microsoft office_web_apps to a higher version than 2010:sp2,2013:sp1,and avoid the version 2010:sp2,2013:sp1; Upgrade microsoft sharepoint_enterprise_server to a higher version than 2013:sp1,2016,and avoid the version 2013:sp1,2016; Upgrade microsoft word_automation_services to a higher version than -