Skip to content
fr Sign in
Not rated

CVE-2020-0697 An elevation of privilege vulnerability exists in Microsoft Office OLicenseHeartbeat task, where an attacker who…

Description

An elevation of privilege vulnerability exists in Microsoft Office OLicenseHeartbeat task, where an attacker who successfully exploited this vulnerability could run this task as SYSTEM.To exploit the vulnerability, an authenticated attacker would need to place a specially crafted file in a specific location, thereby allowing arbitrary file corruption.The security update addresses the vulnerability by correcting how the process validates the log file., aka 'Microsoft Office Tampering Vulnerability'.

Affected products and versions

Product Affected versions Fixed in
Office 365 ProPlus Versions not published

References

Timeline

  1. Published
  2. Last modified

Other CVEs of Office 365 ProPlus

The 61 CVEs of Office 365 ProPlus →
CVE-2020-0991 A remote code execution vulnerability exists in Microsoft Office software when the software fails to properly handle… Not rated CVE-2020-0980 A remote code execution vulnerability exists in Microsoft Word software when it fails to properly handle objects in… Not rated CVE-2020-0979 A remote code execution vulnerability exists in Microsoft Excel software when the software fails to properly handle… Not rated CVE-2020-0961 A remote code execution vulnerability exists when the Microsoft Office Access Connectivity Engine improperly handles… Not rated
Track this CVE