CVE-2019-1084

🗓️ 15 Jul 2019 18:56:21Reported by microsoftType

Information disclosure vulnerability in Exchange due to invalid display names

Reporter	Title	Published	Views	Family All 41
BDU FSTEC	The vulnerabilities of Microsoft Exchange Server, Microsoft Lync and Skype for Business messaging programs, Microsoft Outlook and Outlook for iOS email clients, as well as Microsoft Office and Office 365 software packages, are related to the lack of protection for mission-critical data. This makes it possible for attackers to disclose protected information.	23 Jul 201900:00	–	bdu_fstec
CVE	CVE-2019-1084	15 Jul 201918:56	–	cve
EUVD	EUVD-2019-9665	7 Oct 202500:30	–	euvd
Microsoft KB	Description of the security update for Office 2013: July 9, 2019	9 Jul 201907:00	–	mskb
Microsoft KB	Description of the security update for Outlook 2013: July 9, 2019	9 Jul 201907:00	–	mskb
Microsoft KB	Description of the security update for Outlook 2010: July 9, 2019	9 Jul 201907:00	–	mskb
Microsoft KB	Description of the security update for Office 2016: July 9, 2019	9 Jul 201907:00	–	mskb
Microsoft KB	Description of the security update for Outlook 2016: July 9, 2019	9 Jul 201907:00	–	mskb
Microsoft KB	Security update 2019-07-09	9 Jul 201907:00	–	mskb
Microsoft KB	Description of the security update for Skype for Business 2016: July 9, 2019	9 Jul 201907:00	–	mskb

[
  {
    "product": "Microsoft Exchange Server",
    "vendor": "Microsoft",
    "versions": [
      {
        "status": "affected",
        "version": "2010 Service Pack 3"
      }
    ]
  },
  {
    "product": "Microsoft Outlook",
    "vendor": "Microsoft",
    "versions": [
      {
        "status": "affected",
        "version": "2010 Service Pack 2 (32-bit editions)"
      },
      {
        "status": "affected",
        "version": "2010 Service Pack 2 (64-bit editions)"
      },
      {
        "status": "affected",
        "version": "2016 (32-bit edition)"
      },
      {
        "status": "affected",
        "version": "2016 (64-bit edition)"
      },
      {
        "status": "affected",
        "version": "2013 Service Pack 1 (32-bit editions)"
      },
      {
        "status": "affected",
        "version": "2013 Service Pack 1 (64-bit editions)"
      }
    ]
  },
  {
    "product": "Microsoft Office",
    "vendor": "Microsoft",
    "versions": [
      {
        "status": "affected",
        "version": "2013 Service Pack 1 (32-bit editions)"
      },
      {
        "status": "affected",
        "version": "2013 Service Pack 1 (64-bit editions)"
      },
      {
        "status": "affected",
        "version": "2013 RT Service Pack 1"
      },
      {
        "status": "affected",
        "version": "2016 for Mac"
      },
      {
        "status": "affected",
        "version": "2016 (32-bit edition)"
      },
      {
        "status": "affected",
        "version": "2016 (64-bit edition)"
      },
      {
        "status": "affected",
        "version": "2019 for 32-bit editions"
      },
      {
        "status": "affected",
        "version": "2019 for 64-bit editions"
      },
      {
        "status": "affected",
        "version": "2019 for Mac"
      }
    ]
  },
  {
    "product": "Microsoft Lync",
    "vendor": "Microsoft",
    "versions": [
      {
        "status": "affected",
        "version": "2013 Service Pack 1 (32-bit)"
      },
      {
        "status": "affected",
        "version": "2013 Service Pack 1 (64-bit)"
      }
    ]
  },
  {
    "product": "Microsoft Lync Basic",
    "vendor": "Microsoft",
    "versions": [
      {
        "status": "affected",
        "version": "2013 Service Pack 1 (32-bit)"
      },
      {
        "status": "affected",
        "version": "2013 Service Pack 1 (64-bit)"
      }
    ]
  },
  {
    "product": "Microsoft Outlook for Android",
    "vendor": "Microsoft",
    "versions": [
      {
        "status": "affected",
        "version": "unspecified"
      }
    ]
  },
  {
    "product": "Skype for Business",
    "vendor": "Microsoft",
    "versions": [
      {
        "status": "affected",
        "version": "2016 (32-bit)"
      },
      {
        "status": "affected",
        "version": "2016 (64-bit)"
      }
    ]
  },
  {
    "product": "Skype for Business Basic",
    "vendor": "Microsoft",
    "versions": [
      {
        "status": "affected",
        "version": "2016 (32-bit)"
      },
      {
        "status": "affected",
        "version": "2016 (64-bit)"
      }
    ]
  },
  {
    "product": "Office 365 ProPlus",
    "vendor": "Microsoft",
    "versions": [
      {
        "status": "affected",
        "version": "32-bit Systems"
      },
      {
        "status": "affected",
        "version": "64-bit Systems"
      }
    ]
  },
  {
    "product": "Microsoft Exchange Server 2016",
    "vendor": "Microsoft",
    "versions": [
      {
        "status": "affected",
        "version": "Cumulative Update 12"
      },
      {
        "status": "affected",
        "version": "Cumulative Update 13"
      }
    ]
  },
  {
    "product": "Microsoft Exchange Server 2019",
    "vendor": "Microsoft",
    "versions": [
      {
        "status": "affected",
        "version": "Cumulative Update 1"
      },
      {
        "status": "affected",
        "version": "Cumulative Update 2"
      }
    ]
  },
  {
    "product": "Microsoft Exchange Server 2013",
    "vendor": "Microsoft",
    "versions": [
      {
        "status": "affected",
        "version": "Cumulative Update 23"
      }
    ]
  },
  {
    "product": "Mail and Calendar",
    "vendor": "Microsoft",
    "versions": [
      {
        "status": "affected",
        "version": "unspecified"
      }
    ]
  },
  {
    "product": "Outlook for iOS",
    "vendor": "Microsoft",
    "versions": [
      {
        "status": "affected",
        "version": "unspecified"
      }
    ]
  }
]

Source	Link
portal	www.portal.msrc.microsoft.com/en-US/security-guidance/advisory/CVE-2019-1084

15 Jul 2019 18:56Current

5.4Medium risk

Vulners AI Score5.4

EPSS0.09029