Security Updates for Microsoft Office Products C2R (February 2020)

The Microsoft Office Products are missing security updates. It is, therefore, affected by multiple vulnerabilities: - A remote code execution vulnerability exists in Microsoft Excel software when the software fails to properly handle objects in memory. An attacker who successfully exploited the...

Security Updates for Microsoft Office Products (February 2020) (deprecated)

This plugin has been deprecated to be brought in line with Tenable's C2R plugin policy. Pleas use smbntms22marvisioc2r.nasl instead. %NASLMINLEVEL 70300 C Tenable, Inc. @DEPRECATED@ Disabled on 2022/06/09. Deprecated by smbntms20fedofficec2r.nasl. include'deprecatednasllevel.inc';...

CVE-2020-0697

CVE-2020-0697 is a Microsoft Office elevation-of-privilege flaw affecting the OLicenseHeartbeat task. An authenticated attacker could place a specially crafted file in a specific location to run the task with SYSTEM privileges, enabling arbitrary file corruption. The vulnerability is addressed by...