KLA11617 Multiple vulnerabilities in Microsoft Office

🗓️ 10 Dec 2019 00:00:00Reported by Kaspersky LabType

kaspersky🔗 threats.kaspersky.com👁 52 Views

Multiple vulnerabilities in Microsoft Office. Malicious users can exploit to execute arbitrary code, obtain sensitive information, and spoof user interfac

Reporter	Title	Published	Views	Family All 116
BDU FSTEC	The vulnerability of the Skype for Business Server’s instant messaging program, related to errors in information presentation by the user interface, allows attackers to carry out spoofing attacks.	17 Dec 201900:00	–	bdu_fstec
BDU FSTEC	The vulnerability of Microsoft Excel spreadsheet editors, as well as Microsoft Office and Office 365 products, allows attackers to gain unauthorized access to protected information.	17 Dec 201900:00	–	bdu_fstec
BDU FSTEC	The vulnerability of the relational database management system used by Microsoft Access programs in Microsoft Office and Office 365 allows a perpetrator to gain unauthorized access to protected information.	17 Dec 201900:00	–	bdu_fstec
BDU FSTEC	The vulnerability in the Microsoft PowerPoint presentation preparation and viewing software, as well as in the Microsoft Office and Office 365 programs, allows a hacker to execute arbitrary code.	17 Dec 201900:00	–	bdu_fstec
BDU FSTEC	The vulnerability of Microsoft Word, Microsoft Office products, and Office 365 allows a perpetrator to execute arbitrary code.	17 Dec 201900:00	–	bdu_fstec
BDU FSTEC	The vulnerability of the relational database management system used by Microsoft Access programs in Microsoft Office and Office 365 allows a perpetrator to gain unauthorized access to protected information.	17 Dec 201900:00	–	bdu_fstec
Circl	CVE-2019-1400	9 Mar 202414:16	–	circl
Circl	CVE-2019-1461	9 Mar 202414:16	–	circl
Circl	CVE-2019-1462	9 Mar 202414:46	–	circl
Circl	CVE-2019-1463	9 Mar 202414:46	–	circl

Source	Link
portal	www.portal.msrc.microsoft.com/api/security-guidance/en-US/CVE/CVE-2019-1462
portal	www.portal.msrc.microsoft.com/api/security-guidance/en-US/CVE/CVE-2019-1400
portal	www.portal.msrc.microsoft.com/api/security-guidance/en-US/CVE/CVE-2019-1464
portal	www.portal.msrc.microsoft.com/api/security-guidance/en-US/CVE/CVE-2019-1461
portal	www.portal.msrc.microsoft.com/api/security-guidance/en-US/CVE/CVE-2019-1490
portal	www.portal.msrc.microsoft.com/api/security-guidance/en-US/CVE/CVE-2019-1463
threats	www.threats.kaspersky.com/en/product/Microsoft-Office/
threats	www.threats.kaspersky.com/en/product/Microsoft-Excel/
threats	www.threats.kaspersky.com/en/product/Microsoft-Word/
support	www.support.microsoft.com/kb/4484192

22 Jan 2024 00:00Current

7.5High risk

Vulners AI Score7.5

CVSS 29.3

CVSS 3.17.8

EPSS0.18328

microsoft office microsoft word microsoft excel microsoft access remote code execution information disclosure spoofing arbitrary code execution sensitive information user interface