Lucene search

K
openvasCopyright (C) 2023 Greenbone AGOPENVAS:1361412562310821350
HistoryJan 11, 2023 - 12:00 a.m.

Microsoft Office Outlook 2019 RCE Vulnerabilities (Jan 2023) - Mac OS X

2023-01-1100:00:00
Copyright (C) 2023 Greenbone AG
plugins.openvas.org
5
microsoft office
outlook 2019
rce vulnerabilities
mac os x
security
update
exploit
code
email
microsoft
2019
upgrade

7.8 High

CVSS3

Attack Vector

LOCAL

Attack Complexity

LOW

Privileges Required

NONE

User Interaction

REQUIRED

Scope

UNCHANGED

Confidentiality Impact

HIGH

Integrity Impact

HIGH

Availability Impact

HIGH

CVSS:3.1/AV:L/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H

7.6 High

AI Score

Confidence

High

0.003 Low

EPSS

Percentile

65.1%

This host is missing an important security
update for Microsoft Office Outlook 2019 on Mac OS X according to Microsoft
security update January 2023

# SPDX-FileCopyrightText: 2023 Greenbone AG
# Some text descriptions might be excerpted from (a) referenced
# source(s), and are Copyright (C) by the respective right holder(s).
#
# SPDX-License-Identifier: GPL-2.0-only


if(description)
{
  script_oid("1.3.6.1.4.1.25623.1.0.821350");
  script_version("2024-02-16T05:06:55+0000");
  script_cve_id("CVE-2023-21734", "CVE-2023-21735");
  script_tag(name:"cvss_base", value:"7.2");
  script_tag(name:"cvss_base_vector", value:"AV:L/AC:L/Au:N/C:C/I:C/A:C");
  script_tag(name:"last_modification", value:"2024-02-16 05:06:55 +0000 (Fri, 16 Feb 2024)");
  script_tag(name:"severity_vector", value:"CVSS:3.1/AV:L/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H");
  script_tag(name:"severity_origin", value:"NVD");
  script_tag(name:"severity_date", value:"2023-01-10 22:15:00 +0000 (Tue, 10 Jan 2023)");
  script_tag(name:"creation_date", value:"2023-01-11 12:55:08 +0530 (Wed, 11 Jan 2023)");
  script_name("Microsoft Office Outlook 2019 RCE Vulnerabilities (Jan 2023) - Mac OS X");

  script_tag(name:"summary", value:"This host is missing an important security
  update for Microsoft Office Outlook 2019 on Mac OS X according to Microsoft
  security update January 2023");

  script_tag(name:"vuldetect", value:"Checks if a vulnerable version is present
  on the target host.");

  script_tag(name:"insight", value:"Multiple flaws exist due to an unspecified error
  in Microsoft Office Outlook and Graphics");

  script_tag(name:"impact", value:"Successful exploitation will allow an attacker
  to trust a signed email message as if it came from a legitimate user and
  execute the code");

  script_tag(name:"affected", value:"Microsoft Office 2019 on Mac OS X.");

  script_tag(name:"solution", value:"Upgrade to version 16.69 (Build 23010700)
  for Microsoft Office 2019. Please see the references for more information.");

  script_tag(name:"qod_type", value:"executable_version");
  script_tag(name:"solution_type", value:"VendorFix");
  script_xref(name:"URL", value:"https://docs.microsoft.com/en-gb/officeupdates/release-notes-office-for-mac");
  script_category(ACT_GATHER_INFO);
  script_copyright("Copyright (C) 2023 Greenbone AG");
  script_family("Mac OS X Local Security Checks");
  script_dependencies("gb_microsoft_office_detect_macosx.nasl");
  script_mandatory_keys("MS/Office/MacOSX/Ver");
  exit(0);
}
include("version_func.inc");

if(!vers = get_kb_item("MS/Office/MacOSX/Ver")){
  exit(0);
}

if(vers =~ "^16\.")
{
  if(version_in_range(version:vers, test_version:"16.17.0", test_version2:"16.68")) {
    report = report_fixed_ver(installed_version:vers, fixed_version:"16.69 (Build 23010700)");
    security_message(port:0, data:report);
    exit(0);
  }
}

exit(99);

7.8 High

CVSS3

Attack Vector

LOCAL

Attack Complexity

LOW

Privileges Required

NONE

User Interaction

REQUIRED

Scope

UNCHANGED

Confidentiality Impact

HIGH

Integrity Impact

HIGH

Availability Impact

HIGH

CVSS:3.1/AV:L/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H

7.6 High

AI Score

Confidence

High

0.003 Low

EPSS

Percentile

65.1%