CVE-2020-1449: Microsoft Office

Описание

Оригинално описание

A remote code execution vulnerability exists in Microsoft Project software when the software fails to check the source markup of a file, aka 'Microsoft Project Remote Code Execution Vulnerability'.

Засегнати продукти

• Microsoft Microsoft Office: 2019 for 32-bit editions; 2019 for 64-bit editions
• Microsoft Microsoft 365 Apps for Enterprise for 32-bit Systems: unspecified
• Microsoft Microsoft 365 Apps for Enterprise for 64-bit Systems: unspecified
• Microsoft Microsoft Project: 2013 Service Pack 1 (32-bit editions); 2013 Service Pack 1 (64-bit editions); 2016 (32-bit edition); 2016 (64-bit edition); 2010 Service Pack 2 (32-bit editions); 2010 Service Pack 2 (64-bit editions)

История

Други уязвимости в Microsoft Microsoft Office

• CVE-2020-1458
• CVE-2020-1447
• CVE-2020-1448
• CVE-2020-1445
• CVE-2020-1446

Първоизточници

• https://www.cve.org/CVERecord?id=CVE-2020-1449
• https://nvd.nist.gov/vuln/detail/CVE-2020-1449
• https://portal.msrc.microsoft.com/en-US/security-guidance/advisory/CVE-2020-1449