Aller au contenu
en Se connecter
Non notée

CVE-2019-1449 A security feature bypass vulnerability exists in the way that Office Click-to-Run (C2R) components handle a specially…

Description

A security feature bypass vulnerability exists in the way that Office Click-to-Run (C2R) components handle a specially crafted file, which could lead to a standard user, any AppContainer sandbox, and Office LPAC Protected View to escalate privileges to SYSTEM.To exploit this bug, an attacker would have to run a specially crafted file, aka 'Microsoft Office ClickToRun Security Feature Bypass Vulnerability'.

Produits et versions touchés

Produit Versions touchées Corrigé en
Microsoft Office Versions non publiées
Office 365 ProPlus Versions non publiées

Références

Chronologie

  1. Publiée
  2. Dernière modification

Autres CVE de Microsoft Office

Les 126 CVE de Microsoft Office →
CVE-2020-1449 A remote code execution vulnerability exists in Microsoft Project software when the software fails to check the source… Non notée CVE-2020-1447 A remote code execution vulnerability exists in Microsoft Word software when it fails to properly handle objects in… Non notée CVE-2020-1448 A remote code execution vulnerability exists in Microsoft Word software when it fails to properly handle objects in… Non notée CVE-2020-1446 A remote code execution vulnerability exists in Microsoft Word software when it fails to properly handle objects in… Non notée
Suivre cette CVE