KLA11633 Multiple vulnerabilities in Microsoft Office

🗓️ 14 Jan 2020 00:00:00Reported by Kaspersky LabType

kaspersky🔗 threats.kaspersky.com👁 52 Views

Multiple vulnerabilities in Microsoft Office. Malicious users can exploit to bypass security restrictions, execute arbitrary code, spoof user interface

Reporter	Title	Published	Views	Family All 87
BDU FSTEC	The vulnerability of Microsoft Excel spreadsheet editors, as well as Microsoft Office and Office 365 products, relates to errors in memory object handling. This vulnerability allows attackers to execute arbitrary code.	22 Jan 202000:00	–	bdu_fstec
BDU FSTEC	The vulnerability of the One Drive for Android app, related to security configuration errors, allows attackers to escalate their privileges.	22 Jan 202000:00	–	bdu_fstec
BDU FSTEC	The vulnerability of the Office Online Server web server, related to errors in information representation by the user interface, allows attackers to perform spear-phishing attacks.	22 Jan 202000:00	–	bdu_fstec
BDU FSTEC	The vulnerability of Microsoft Excel spreadsheet editors, as well as Microsoft Office and Office 365 products, relates to errors in memory object handling. This vulnerability allows attackers to execute arbitrary code.	22 Jan 202000:00	–	bdu_fstec
BDU FSTEC	The vulnerability of Microsoft Office and Office 365 programs, related to errors in memory object handling, allows attackers to execute arbitrary code.	22 Jan 202000:00	–	bdu_fstec
BDU FSTEC	The vulnerability of the Microsoft Office 365 software, related to errors in memory object handling, allows a hacker to execute arbitrary code.	22 Jan 202000:00	–	bdu_fstec
Circl	CVE-2020-0654	17 Jan 202014:20	–	circl
CNVD	Microsoft Excel Remote Code Execution Vulnerability (CNVD-2020-03534)	16 Jan 202000:00	–	cnvd
CNVD	Microsoft Office Remote Code Execution Vulnerability (CNVD-2020-03535)	16 Jan 202000:00	–	cnvd
CNVD	Microsoft Excel Remote Code Execution Vulnerability (CNVD-2020-03536)	16 Jan 202000:00	–	cnvd

Source	Link
portal	www.portal.msrc.microsoft.com/api/security-guidance/en-US/CVE/CVE-2020-0654
portal	www.portal.msrc.microsoft.com/api/security-guidance/en-US/CVE/CVE-2020-0652
portal	www.portal.msrc.microsoft.com/api/security-guidance/en-US/CVE/CVE-2020-0653
portal	www.portal.msrc.microsoft.com/api/security-guidance/en-US/CVE/CVE-2020-0650
portal	www.portal.msrc.microsoft.com/api/security-guidance/en-US/CVE/CVE-2020-0651
portal	www.portal.msrc.microsoft.com/api/security-guidance/en-US/CVE/CVE-2020-0647
threats	www.threats.kaspersky.com/en/product/Microsoft-Office/
threats	www.threats.kaspersky.com/en/product/Microsoft-Excel/
support	www.support.microsoft.com/kb/4484221
support	www.support.microsoft.com/kb/4484236

22 Jan 2024 00:00Current

8.1High risk

Vulners AI Score8.1

CVSS 3.19.1

CVSS 29.3

EPSS0.20398