KLA11604 Multiple vulnerabilities in Microsoft Office

🗓️ 12 Nov 2019 00:00:00Reported by Kaspersky LabType

kaspersky🔗 threats.kaspersky.com👁 85 Views

Multiple vulnerabilities in Microsoft Office allow for information disclosure, security bypass, user interface spoofing, and remote code execution

Reporter	Title	Published	Views	Family All 153
ATTACKERKB	Automatic macro execution bug in Office Mac _when_ macros are disabled	12 Nov 201900:00	–	attackerkb
BDU FSTEC	The vulnerability of Microsoft Office packages, related to errors in information presentation by the user interface, allows an intruder to gain unauthorized access to protected information.	3 Dec 201900:00	–	bdu_fstec
BDU FSTEC	The vulnerability of the Microsoft SharePoint Enterprise Server software and the Microsoft SharePoint Foundation email messaging software lies in its ability to allow unlimited download of files of a dangerous type, enabling an intruder to gain unauthorized access to protected information.	3 Dec 201900:00	–	bdu_fstec
BDU FSTEC	The vulnerability of the Office Online Server, related to information representation errors in the user interface, allows attackers to perform spoofing attacks.	3 Dec 201900:00	–	bdu_fstec
BDU FSTEC	The vulnerability of Microsoft Excel, Office, Office 365, Microsoft SharePoint Enterprise Server, and Office Online Server packages lies in the fact that operations are performed outside of the buffer in memory, allowing an intruder to gain unauthorized access to protected information.	3 Dec 201900:00	–	bdu_fstec
BDU FSTEC	The vulnerability of the Office Online Server, related to information representation errors in the user interface, allows attackers to perform spoofing attacks.	3 Dec 201900:00	–	bdu_fstec
BDU FSTEC	The vulnerability of Microsoft Excel, Office, and Office 365 software lies in insufficient validation of input data, which allows attackers to execute arbitrary code.	3 Dec 201900:00	–	bdu_fstec
BDU FSTEC	The vulnerability of the Click-to-Run components of Microsoft Office and Office 365 allows attackers to enhance their privileges.	3 Dec 201900:00	–	bdu_fstec
BDU FSTEC	The vulnerability of the Microsoft Office suite arises from insufficient data validation, allowing attackers to execute arbitrary code.	3 Dec 201900:00	–	bdu_fstec
BDU FSTEC	The vulnerability of the Microsoft Office suite relates to errors in memory object handling, which allows an intruder to gain unauthorized access to protected information.	3 Dec 201900:00	–	bdu_fstec

Source	Link
portal	www.portal.msrc.microsoft.com/api/security-guidance/en-US/CVE/CVE-2019-1443
portal	www.portal.msrc.microsoft.com/api/security-guidance/en-US/CVE/CVE-2019-1449
portal	www.portal.msrc.microsoft.com/api/security-guidance/en-US/CVE/CVE-2019-1447
portal	www.portal.msrc.microsoft.com/api/security-guidance/en-US/CVE/CVE-2019-1446
portal	www.portal.msrc.microsoft.com/api/security-guidance/en-US/CVE/CVE-2019-1445
portal	www.portal.msrc.microsoft.com/api/security-guidance/en-US/CVE/CVE-2019-1448
portal	www.portal.msrc.microsoft.com/api/security-guidance/en-US/CVE/CVE-2019-1457
portal	www.portal.msrc.microsoft.com/api/security-guidance/en-US/CVE/CVE-2019-1402
portal	www.portal.msrc.microsoft.com/api/security-guidance/en-US/CVE/CVE-2019-1442
threats	www.threats.kaspersky.com/en/class/Exploit/

22 Jan 2024 00:00Current

8.3High risk

Vulners AI Score8.3

CVSS 210

CVSS 3.19.8

EPSS0.28178