CVE-2020-0850

🗓️ 12 Mar 2020 15:48:40Reported by microsoftType

Microsoft Word remote code execution vulnerability

Reporter	Title	Published	Views	Family All 43
Information Security Automation	Microsoft Patch Tuesday March 2020: a new record was set, SMBv3 “Wormable” RCE and updates for February goldies	22 Mar 202001:15	–	avleonov
BDU FSTEC	The vulnerability of Microsoft Word text editors arises from the possibility of writing operations beyond the buffer in memory, allowing an attacker to execute arbitrary code.	18 Mar 202000:00	–	bdu_fstec
CNVD	Microsoft Word Remote Code Execution Vulnerability (CNVD-2020-18523)	12 Mar 202000:00	–	cnvd
CVE	CVE-2020-0850	12 Mar 202015:48	–	cve
Microsoft KB	Description of the security update for SharePoint Enterprise Server 2013: March 10, 2020	10 Mar 202007:00	–	mskb
Microsoft KB	Description of the security update for SharePoint Foundation 2013: March 10, 2020	10 Mar 202007:00	–	mskb
Microsoft KB	End of support for Office 2010	10 Mar 202007:00	–	mskb
Microsoft KB	End of support for Office 2016 and Office 2019	10 Mar 202007:00	–	mskb
Microsoft KB	Description of the security update for Office Online Server: March 10, 2020	10 Mar 202007:00	–	mskb
Microsoft KB	Description of the security update for SharePoint Server 2019: March 10, 2020	10 Mar 202007:00	–	mskb

[
  {
    "product": "Microsoft SharePoint Enterprise Server",
    "vendor": "Microsoft",
    "versions": [
      {
        "status": "affected",
        "version": "2016"
      },
      {
        "status": "affected",
        "version": "2013 Service Pack 1"
      }
    ]
  },
  {
    "product": "Microsoft SharePoint Server",
    "vendor": "Microsoft",
    "versions": [
      {
        "status": "affected",
        "version": "2019"
      }
    ]
  },
  {
    "product": "Microsoft Office",
    "vendor": "Microsoft",
    "versions": [
      {
        "status": "affected",
        "version": "2019 for 32-bit editions"
      },
      {
        "status": "affected",
        "version": "2019 for 64-bit editions"
      },
      {
        "status": "affected",
        "version": "2019 for Mac"
      },
      {
        "status": "affected",
        "version": "2016 for Mac"
      }
    ]
  },
  {
    "product": "Office 365 ProPlus",
    "vendor": "Microsoft",
    "versions": [
      {
        "status": "affected",
        "version": "32-bit Systems"
      },
      {
        "status": "affected",
        "version": "64-bit Systems"
      }
    ]
  },
  {
    "product": "Microsoft Office Online Server",
    "vendor": "Microsoft",
    "versions": [
      {
        "status": "affected",
        "version": "unspecified"
      }
    ]
  },
  {
    "product": "Microsoft Word",
    "vendor": "Microsoft",
    "versions": [
      {
        "status": "affected",
        "version": "2016 (32-bit edition)"
      },
      {
        "status": "affected",
        "version": "2016 (64-bit edition)"
      },
      {
        "status": "affected",
        "version": "2013 RT Service Pack 1"
      },
      {
        "status": "affected",
        "version": "2013 Service Pack 1 (32-bit editions)"
      },
      {
        "status": "affected",
        "version": "2013 Service Pack 1 (64-bit editions)"
      }
    ]
  },
  {
    "product": "Microsoft SharePoint Foundation",
    "vendor": "Microsoft",
    "versions": [
      {
        "status": "affected",
        "version": "2013 Service Pack 1"
      }
    ]
  }
]

Source	Link
portal	www.portal.msrc.microsoft.com/en-US/security-guidance/advisory/CVE-2020-0850

12 Mar 2020 15:48Current

8.4High risk

Vulners AI Score8.4

EPSS0.33494