CVE-2020-0696

🗓️ 11 Feb 2020 21:23:02Reported by microsoftType

Security bypass vulnerability in Microsoft Outlook parsing of URI format

Reporter	Title	Published	Views	Family All 22
BDU FSTEC	The vulnerability of the Microsoft Outlook client and the Microsoft Office and Office 365 ProPlus software packages relates to a security feature that allows an attacker to bypass existing security restrictions. This feature enables the attacker to redirect users to malicious URIs and execute malicious code in conjunction with other vulnerabilities.	12 Mar 202000:00	–	bdu_fstec
CNVD	Microsoft Outlook Security Feature Bypass Vulnerability	17 Feb 202000:00	–	cnvd
CVE	CVE-2020-0696	11 Feb 202021:23	–	cve
EUVD	EUVD-2020-2189	7 Oct 202500:30	–	euvd
Microsoft KB	Description of the security update for Outlook 2013: February 11, 2020	11 Feb 202008:00	–	mskb
Microsoft KB	Description of the security update for Outlook 2010: February 11, 2020	11 Feb 202008:00	–	mskb
Microsoft KB	Description of the security update for Outlook 2016: February 11, 2020	11 Feb 202008:00	–	mskb
Kaspersky	KLA11663 Multiple vulnerabilities in Microsoft Office	11 Feb 202000:00	–	kaspersky
Microsoft CVE	Microsoft Outlook Security Feature Bypass Vulnerability	11 Feb 202008:00	–	mscve
NVD	CVE-2020-0696	11 Feb 202022:15	–	nvd

[
  {
    "product": "Microsoft Office",
    "vendor": "Microsoft",
    "versions": [
      {
        "status": "affected",
        "version": "2019 for 32-bit editions"
      },
      {
        "status": "affected",
        "version": "2019 for 64-bit editions"
      }
    ]
  },
  {
    "product": "Office 365 ProPlus",
    "vendor": "Microsoft",
    "versions": [
      {
        "status": "affected",
        "version": "32-bit Systems"
      },
      {
        "status": "affected",
        "version": "64-bit Systems"
      }
    ]
  },
  {
    "product": "Microsoft Outlook",
    "vendor": "Microsoft",
    "versions": [
      {
        "status": "affected",
        "version": "2016 (32-bit edition)"
      },
      {
        "status": "affected",
        "version": "2016 (64-bit edition)"
      },
      {
        "status": "affected",
        "version": "2013 Service Pack 1 (32-bit editions)"
      },
      {
        "status": "affected",
        "version": "2013 Service Pack 1 (64-bit editions)"
      },
      {
        "status": "affected",
        "version": "2010 Service Pack 2 (32-bit editions)"
      },
      {
        "status": "affected",
        "version": "2010 Service Pack 2 (64-bit editions)"
      },
      {
        "status": "affected",
        "version": "2013 RT Service Pack 1"
      }
    ]
  }
]

Source	Link
portal	www.portal.msrc.microsoft.com/en-US/security-guidance/advisory/CVE-2020-0696

11 Feb 2020 21:23Current

6.6Medium risk

Vulners AI Score6.6

EPSS0.03614