CVE-2018-0883

Windows Shell in Microsoft Windows Server 2008 SP2 and R2 SP1, Windows 7 SP1, Windows 8.1 and RT 8.1, Windows Server 2012 and R2, Windows 10 Gold, 1511, 1607, 1703, Windows Server 2016 and Windows Server, version 1709 allows a remote code execution vulnerability due to how file copy destinations are validated, aka "Windows Shell Remote Code Execution Vulnerability".
ProviderTypeBase ScoreAtk. VectorAtk. ComplexityPriv. RequiredVector
NISTNIST
7.5 HIGH
NETWORK
HIGH
NONE
CVSS:3.0/AV:N/AC:H/PR:N/UI:R/S:U/C:H/I:H/A:H
microsoftCNA
---
---
CVEADP
---
---
Base Score
CVSS 3.x
EPSS Score
Percentile: 95%
VendorProductVersion
microsoftwindows_10
-
microsoftwindows_7
-
microsoftwindows_8.1
-
microsoftwindows_rt_8.1
-
microsoftwindows_server_2008
-
microsoftwindows_server_2012
*
microsoftwindows_server_2016
-
𝑥
= Vulnerable software versions
References
http://www.securityfocus.com/bid/103259
http://www.securitytracker.com/id/1040502
https://portal.msrc.microsoft.com/en-US/security-guidance/advisory/CVE-2018-0883
http://www.securityfocus.com/bid/103259
http://www.securitytracker.com/id/1040502
https://portal.msrc.microsoft.com/en-US/security-guidance/advisory/CVE-2018-0883