Skip to content
fr Sign in
Not rated

CVE-2019-1449 A security feature bypass vulnerability exists in the way that Office Click-to-Run (C2R) components handle a specially…

Description

A security feature bypass vulnerability exists in the way that Office Click-to-Run (C2R) components handle a specially crafted file, which could lead to a standard user, any AppContainer sandbox, and Office LPAC Protected View to escalate privileges to SYSTEM.To exploit this bug, an attacker would have to run a specially crafted file, aka 'Microsoft Office ClickToRun Security Feature Bypass Vulnerability'.

Affected products and versions

Product Affected versions Fixed in
Microsoft Office Versions not published
Office 365 ProPlus Versions not published

References

Timeline

  1. Published
  2. Last modified

Other CVEs of Microsoft Office

The 126 CVEs of Microsoft Office →
CVE-2020-1449 A remote code execution vulnerability exists in Microsoft Project software when the software fails to check the source… Not rated CVE-2020-1448 A remote code execution vulnerability exists in Microsoft Word software when it fails to properly handle objects in… Not rated CVE-2020-1447 A remote code execution vulnerability exists in Microsoft Word software when it fails to properly handle objects in… Not rated CVE-2020-1445 An information disclosure vulnerability exists when Microsoft Office improperly discloses the contents of its memory,… Not rated
Track this CVE