Not rated
CVE-2019-0540 A security feature bypass vulnerability exists when Microsoft Office does not validate URLs.An attacker could send a…
Description
A security feature bypass vulnerability exists when Microsoft Office does not validate URLs.An attacker could send a victim a specially crafted file, which could trick the victim into entering credentials, aka 'Microsoft Office Security Feature Bypass Vulnerability'.
Affected products and versions
| Product | Affected versions | Fixed in |
|---|---|---|
| Microsoft Office | Versions not published | |
| Microsoft Excel Viewer | Versions not published | |
| Office 365 ProPlus | Versions not published | |
| Microsoft PowerPoint Viewer | Versions not published | |
| Microsoft Office Compatibility Pack | Versions not published |
References
- 106863 www.securityfocus.com
- portal.msrc.microsoft.com portal.msrc.microsoft.com
Timeline
- Published
- Last modified
Other CVEs of Microsoft Office
The 126 CVEs of Microsoft Office →
CVE-2020-1449
A remote code execution vulnerability exists in Microsoft Project software when the software fails to check the source…
Not rated
CVE-2020-1447
A remote code execution vulnerability exists in Microsoft Word software when it fails to properly handle objects in…
Not rated
CVE-2020-1448
A remote code execution vulnerability exists in Microsoft Word software when it fails to properly handle objects in…
Not rated
CVE-2020-1446
A remote code execution vulnerability exists in Microsoft Word software when it fails to properly handle objects in…
Not rated