Microsoft Word HTML Rendering Use-After-Free Remote Code Execution Vulnerability

🗓️ 12 Mar 2020 00:00:00Reported by asnineType

zdi🔗 www.zerodayinitiative.com👁 23 Views

Microsoft Word HTML Rendering Use-After-Free Remote Code Execution Vulnerability allows remote code execution on affected installations of Microsoft Word. User interaction is required to exploit the vulnerability by visiting a malicious page or opening a malicious file. The flaw exists within the processing of DOC files with HTML in wwlib, allowing a crafted file to cause a pointer to be reused after it's freed, enabling code execution in the current process context

Reporter	Title	Published	Views	Family All 23
Information Security Automation	Microsoft Patch Tuesday March 2020: a new record was set, SMBv3 “Wormable” RCE and updates for February goldies	22 Mar 202001:15	–	avleonov
CNVD	Microsoft Word Remote Code Execution Vulnerability (CNVD-2020-17174)	13 Mar 202000:00	–	cnvd
CVE	CVE-2020-0851	12 Mar 202015:48	–	cve
Cvelist	CVE-2020-0851	12 Mar 202015:48	–	cvelist
Kaspersky	KLA11687 Multiple vulnerabilities in Microsoft Office	10 Mar 202000:00	–	kaspersky
Tenable Nessus	Security Updates for Microsoft Office Products (March 2020) (macOS)	11 Mar 202000:00	–	nessus
Tenable Nessus	Security Updates for Microsoft Office Products (March 2020)	11 Mar 202000:00	–	nessus
Tenable Nessus	Security Updates for Microsoft Office Products C2R (March 2020)	10 Jun 202200:00	–	nessus
Microsoft CVE	Microsoft Word Remote Code Execution Vulnerability	10 Mar 202007:00	–	mscve
NVD	CVE-2020-0851	12 Mar 202016:15	–	nvd