The vulnerability of the Microsoft Outlook client and the Microsoft Office and Office 365 ProPlus software packages relates to a security feature that allows an attacker to bypass existing security restrictions. This feature enables the attacker to redirect users to malicious URIs and execute malicious code in conjunction with other vulnerabilities.

🗓️ 12 Mar 2020 00:00:00Reported by FSTEC of Russia — Information Security Threat DatabaseType

bdu_fstec

bdu_fstec🔗 bdu.fstec.ru👁 6 Views

Outlook and Office ProPlus bypass security to redirect to malicious URLs and enable code execution.

Reporter	Title	Published	Views	Family All 22
CNVD	Microsoft Outlook Security Feature Bypass Vulnerability	17 Feb 202000:00	–	cnvd
CVE	CVE-2020-0696	11 Feb 202021:23	–	cve
Cvelist	CVE-2020-0696	11 Feb 202021:23	–	cvelist
EUVD	EUVD-2020-2189	7 Oct 202500:30	–	euvd
Microsoft KB	Description of the security update for Outlook 2013: February 11, 2020	11 Feb 202008:00	–	mskb
Microsoft KB	Description of the security update for Outlook 2010: February 11, 2020	11 Feb 202008:00	–	mskb
Microsoft KB	Description of the security update for Outlook 2016: February 11, 2020	11 Feb 202008:00	–	mskb
Kaspersky	KLA11663 Multiple vulnerabilities in Microsoft Office	11 Feb 202000:00	–	kaspersky
Microsoft CVE	Microsoft Outlook Security Feature Bypass Vulnerability	11 Feb 202008:00	–	mscve
NVD	CVE-2020-0696	11 Feb 202022:15	–	nvd

Source	Link
portal	www.portal.msrc.microsoft.com/en-US/security-guidance/advisory/CVE-2020-0696;
nvd	www.nvd.nist.gov/vuln/detail/CVE-2020-0696
web	www.web.nvd.nist.gov/view/vuln/detail

12 Mar 2020 00:00Current

6.5Medium risk

Vulners AI Score6.5

CVSS 36.5

CVSS 27.1

EPSS0.04992

Outlook vulnerability Office ProPlus bypass security features redirect malicious links code execution