Not rated
CVE-2019-0801 A remote code execution vulnerability exists when Microsoft Office fails to properly handle certain files.To exploit the…
Description
A remote code execution vulnerability exists when Microsoft Office fails to properly handle certain files.To exploit the vulnerability, an attacker would have to convince a user to open a specially crafted URL file that points to an Excel or PowerPoint file that was also downloaded.The update addresses the vulnerability by correcting how Office handles these files., aka 'Office Remote Code Execution Vulnerability'.
Affected products and versions
| Product | Affected versions | Fixed in |
|---|---|---|
| Microsoft Office | Versions not published | |
| Office 365 ProPlus | Versions not published |
References
- portal.msrc.microsoft.com portal.msrc.microsoft.com
- www.zerodayinitiative.com www.zerodayinitiative.com
Timeline
- Published
- Last modified
Other CVEs of Microsoft Office
The 126 CVEs of Microsoft Office →
CVE-2020-1449
A remote code execution vulnerability exists in Microsoft Project software when the software fails to check the source…
Not rated
CVE-2020-1447
A remote code execution vulnerability exists in Microsoft Word software when it fails to properly handle objects in…
Not rated
CVE-2020-1448
A remote code execution vulnerability exists in Microsoft Word software when it fails to properly handle objects in…
Not rated
CVE-2020-1445
An information disclosure vulnerability exists when Microsoft Office improperly discloses the contents of its memory,…
Not rated