KLA11499 Multiple vulnerabilities in Microsoft Office

🗓️ 11 Jun 2019 00:00:00Reported by Kaspersky LabType

kaspersky🔗 threats.kaspersky.com👁 50 Views

Multiple vulnerabilities in Microsoft Office, including remote code execution, cross-site scripting, and denial of service

Reporter	Title	Published	Views	Family All 101
BDU FSTEC	The vulnerability of Skype for Business Server (Microsoft Lync Server) in corporate communication servers allows a perpetrator to trigger a service failure.	18 Jun 201900:00	–	bdu_fstec
BDU FSTEC	The vulnerability of the Microsoft SharePoint software package, related to the lack of measures taken to protect the structure of web pages, allows attackers to execute cross-site scripting attacks.	18 Jun 201900:00	–	bdu_fstec
BDU FSTEC	The vulnerability of the Microsoft SharePoint software package, related to the lack of measures taken to protect the structure of web pages, allows attackers to execute cross-site scripting attacks.	18 Jun 201900:00	–	bdu_fstec
BDU FSTEC	The vulnerability of the Microsoft SharePoint software package, related to the lack of measures taken to protect the structure of web pages, allows attackers to execute cross-site scripting attacks.	18 Jun 201900:00	–	bdu_fstec
BDU FSTEC	The vulnerability of Microsoft Word text editors, related to the execution of operations beyond buffer boundaries in memory, allows attackers to execute arbitrary code.	18 Jun 201900:00	–	bdu_fstec
BDU FSTEC	The vulnerability of Microsoft Word text editors arises from the possibility of writing operations beyond the buffer in memory, allowing an attacker to execute arbitrary code.	18 Jun 201900:00	–	bdu_fstec
BDU FSTEC	The vulnerability of the Microsoft SharePoint software package, related to the lack of measures taken to protect the structure of web pages, allows attackers to execute cross-site scripting attacks.	18 Jun 201900:00	–	bdu_fstec
CNVD	Microsoft SharePoint Cross-Site Scripting Vulnerability (CNVD-2019-34775)	13 Jun 201900:00	–	cnvd
CNVD	Microsoft SharePoint Cross-Site Scripting Vulnerability (CNVD-2019-34776)	13 Jun 201900:00	–	cnvd
CNVD	Microsoft Word Code Execution Vulnerability (CNVD-2025-17495)	13 Jun 201900:00	–	cnvd

Source	Link
portal	www.portal.msrc.microsoft.com/en-US/security-guidance/advisory/CVE-2019-1034
portal	www.portal.msrc.microsoft.com/en-US/security-guidance/advisory/CVE-2019-1031
portal	www.portal.msrc.microsoft.com/en-US/security-guidance/advisory/CVE-2019-1032
portal	www.portal.msrc.microsoft.com/en-US/security-guidance/advisory/CVE-2019-1029
portal	www.portal.msrc.microsoft.com/en-US/security-guidance/advisory/CVE-2019-1035
portal	www.portal.msrc.microsoft.com/en-US/security-guidance/advisory/CVE-2019-1033
portal	www.portal.msrc.microsoft.com/en-US/security-guidance/advisory/CVE-2019-1036
threats	www.threats.kaspersky.com/en/product/Microsoft-Lync/
threats	www.threats.kaspersky.com/en/product/Microsoft-Word/
threats	www.threats.kaspersky.com/en/product/Microsoft-Lync-Server/

22 Jan 2024 00:00Current

7.5High risk

Vulners AI Score7.5

CVSS 37.8

CVSS 29.3

CVSS 3.17.8

EPSS0.06558