KLA11687 Multiple vulnerabilities in Microsoft Office

🗓️ 10 Mar 2020 00:00:00Reported by Kaspersky LabType

kaspersky🔗 threats.kaspersky.com👁 61 Views

Multiple vulnerabilities found in Microsoft Office. Exploitation can lead to arbitrary code execution, user interface spoofing, and sensitive information access

Reporter	Title	Published	Views	Family All 139
Information Security Automation	Microsoft Patch Tuesday March 2020: a new record was set, SMBv3 “Wormable” RCE and updates for February goldies	22 Mar 202001:15	–	avleonov
BDU FSTEC	Microsoft Office package vulnerabilities, related to deficiencies in object handling in memory, allow attackers to execute arbitrary code.	13 Mar 202000:00	–	bdu_fstec
BDU FSTEC	Microsoft Office package vulnerabilities, related to deficiencies in object handling in memory, allow attackers to execute arbitrary code.	18 Mar 202000:00	–	bdu_fstec
BDU FSTEC	The vulnerability of Microsoft SharePoint Server, SharePoint Foundation, and SharePoint Enterprise Server relates to the lack of protective measures for website structures, allowing attackers to execute cross-site scripting attacks.	18 Mar 202000:00	–	bdu_fstec
BDU FSTEC	The vulnerability of Microsoft SharePoint Server and SharePoint Enterprise Server packages arises from the lack of protective measures for website structures, allowing attackers to execute cross-site scripting attacks.	18 Mar 202000:00	–	bdu_fstec
BDU FSTEC	The vulnerability of Microsoft SharePoint Server, SharePoint Foundation, and SharePoint Enterprise Server relates to the lack of protective measures for website structures, allowing attackers to execute cross-site scripting attacks and modify data.	18 Mar 202000:00	–	bdu_fstec
BDU FSTEC	The vulnerability of Microsoft Word text editors arises from the possibility of writing operations beyond the buffer in memory, allowing an attacker to execute arbitrary code.	18 Mar 202000:00	–	bdu_fstec
BDU FSTEC	The vulnerability of Microsoft Word text editors arises from the possibility of writing operations beyond the buffer in memory, allowing an attacker to execute arbitrary code.	18 Mar 202000:00	–	bdu_fstec
BDU FSTEC	The vulnerability of Microsoft Office package-related office programs lies in the improper handling of objects in memory, which allows an attacker to execute arbitrary code.	20 Mar 202000:00	–	bdu_fstec
BDU FSTEC	The vulnerability of Microsoft Business Productivity Servers, SharePoint Enterprise Server, and SharePoint Foundation lies in the lack of protective measures for website structures, allowing attackers to execute cross-site scripting attacks.	25 Mar 202000:00	–	bdu_fstec

Source	Link
portal	www.portal.msrc.microsoft.com/api/security-guidance/en-US/CVE/CVE-2020-0855
portal	www.portal.msrc.microsoft.com/api/security-guidance/en-US/CVE/CVE-2020-0795
portal	www.portal.msrc.microsoft.com/api/security-guidance/en-US/CVE/CVE-2020-0850
portal	www.portal.msrc.microsoft.com/api/security-guidance/en-US/CVE/CVE-2020-0851
portal	www.portal.msrc.microsoft.com/api/security-guidance/en-US/CVE/CVE-2020-0852
portal	www.portal.msrc.microsoft.com/api/security-guidance/en-US/CVE/CVE-2020-0891
portal	www.portal.msrc.microsoft.com/api/security-guidance/en-US/CVE/CVE-2020-0892
portal	www.portal.msrc.microsoft.com/api/security-guidance/en-US/CVE/CVE-2020-0893
portal	www.portal.msrc.microsoft.com/api/security-guidance/en-US/CVE/CVE-2020-0894
threats	www.threats.kaspersky.com/en/product/Microsoft-Office/

22 Jan 2024 00:00Current

8.3High risk

Vulners AI Score8.3

CVSS 29.3

CVSS 3.15.4 - 8.8

EPSS0.1168

SSVC