Lucene search

K
openvasCopyright (C) 2023 Greenbone AGOPENVAS:1361412562310832130
HistoryJun 14, 2023 - 12:00 a.m.

Microsoft Office 2019 Multiple Vulnerabilities (Jun 2023) - Mac OS X

2023-06-1400:00:00
Copyright (C) 2023 Greenbone AG
plugins.openvas.org
5
mac os x
microsoft office 2019
security update
cve-2023-32029
cve-2023-33133
cve-2023-33146
remote code execution
vendorfix

CVSS3

7.8

Attack Vector

LOCAL

Attack Complexity

LOW

Privileges Required

NONE

User Interaction

REQUIRED

Scope

UNCHANGED

Confidentiality Impact

HIGH

Integrity Impact

HIGH

Availability Impact

HIGH

CVSS:3.1/AV:L/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H

AI Score

7.8

Confidence

High

EPSS

0.004

Percentile

74.5%

This host is missing an important security
update for Microsoft Office 2019 on Mac OS X according to Microsoft security
update June 2023

# SPDX-FileCopyrightText: 2023 Greenbone AG
# Some text descriptions might be excerpted from (a) referenced
# source(s), and are Copyright (C) by the respective right holder(s).
#
# SPDX-License-Identifier: GPL-2.0-only

if(description)
{
  script_oid("1.3.6.1.4.1.25623.1.0.832130");
  script_version("2024-02-16T05:06:55+0000");
  script_cve_id("CVE-2023-33133", "CVE-2023-32029", "CVE-2023-33146");
  script_tag(name:"cvss_base", value:"7.2");
  script_tag(name:"cvss_base_vector", value:"AV:L/AC:L/Au:N/C:C/I:C/A:C");
  script_tag(name:"last_modification", value:"2024-02-16 05:06:55 +0000 (Fri, 16 Feb 2024)");
  script_tag(name:"severity_vector", value:"CVSS:3.1/AV:L/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H");
  script_tag(name:"severity_origin", value:"NVD");
  script_tag(name:"severity_date", value:"2023-06-14 03:37:00 +0000 (Wed, 14 Jun 2023)");
  script_tag(name:"creation_date", value:"2023-06-14 13:16:52 +0530 (Wed, 14 Jun 2023)");
  script_name("Microsoft Office 2019 Multiple Vulnerabilities (Jun 2023) - Mac OS X");

  script_tag(name:"summary", value:"This host is missing an important security
  update for Microsoft Office 2019 on Mac OS X according to Microsoft security
  update June 2023");

  script_tag(name:"vuldetect", value:"Checks if a vulnerable version is present
  on the target host.");

  script_tag(name:"insight", value:"The following flaws exist:

  - CVE-2023-32029 - Microsoft Excel Remote Code Execution Vulnerability

  - CVE-2023-33133 - Microsoft Excel Remote Code Execution Vulnerability

  - CVE-2023-33146 - Microsoft Excel Remote Code Execution Vulnerability.");

  script_tag(name:"impact", value:"Successful exploitation will allow an
  attacker to execute arbitrary code on an affected system.");

  script_tag(name:"affected", value:"Microsoft Office 2019 on Mac OS X.");

  script_tag(name:"solution", value:"Upgrade to version 16.74 (Build 23061100)
  for Microsoft Office 2019. Please see the references for more information.");

  script_tag(name:"qod_type", value:"executable_version");
  script_tag(name:"solution_type", value:"VendorFix");
  script_xref(name:"URL", value:"https://docs.microsoft.com/en-gb/officeupdates/release-notes-office-for-mac");
  script_category(ACT_GATHER_INFO);
  script_copyright("Copyright (C) 2023 Greenbone AG");
  script_family("Mac OS X Local Security Checks");
  script_dependencies("gb_microsoft_office_detect_macosx.nasl");
  script_mandatory_keys("MS/Office/MacOSX/Ver");
  exit(0);
}
include("version_func.inc");

if(!vers = get_kb_item("MS/Office/MacOSX/Ver")){
  exit(0);
}

if(vers =~ "^16\.")
{
  if(version_in_range(version:vers, test_version:"16.17.0", test_version2:"16.74")) {
    report = report_fixed_ver(installed_version:vers, fixed_version:"16.74 (Build 23061100)");
    security_message(data:report);
    exit(0);
  }
}

exit(99);

CVSS3

7.8

Attack Vector

LOCAL

Attack Complexity

LOW

Privileges Required

NONE

User Interaction

REQUIRED

Scope

UNCHANGED

Confidentiality Impact

HIGH

Integrity Impact

HIGH

Availability Impact

HIGH

CVSS:3.1/AV:L/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H

AI Score

7.8

Confidence

High

EPSS

0.004

Percentile

74.5%