PT-2019-1137 · Microsoft · Office 365 Proplus+2

Publicado 2019-01-08 · Atualizado 2020-08-24 · CVE-2019-0559

Positive Technologies (AI Summary)

CVSS v3.1

6.5

Média

Vetor base

AV:N/AC:L/PR:N/UI:R/S:U/C:H/I:N/A:N

Name of the Vulnerable Software and Affected Versions: Microsoft Office versions (affected versions not specified) Office 365 ProPlus (affected versions not specified) Microsoft Outlook (affected versions not specified)

Description: The issue is related to an information disclosure problem due to improper handling of certain message types by Microsoft Outlook. This could allow a remote attacker to gather information about the victim using a specially crafted email message.

Recommendations: For Microsoft Office, update to a version that includes the fix for this issue. For Office 365 ProPlus, apply the necessary patch or update to resolve the vulnerability. For Microsoft Outlook, consider disabling the handling of certain message types until a patch is available.

Correção

Information Disclosure

Enumeração de Fraquezas

CWE-200

Identificadores relacionados

BDU:2019-00163

CVE-2019-0559

Produtos afetados

Office

Outlook

Office 365 Proplus

Referências · 5

• http://securityfocus.com/bid/106397 · Nota
• https://portal.msrc.microsoft.com/en-US/security-guidance/advisory/CVE-2019-0559 · Aviso do Fabricante
• https://nvd.nist.gov/vuln/detail/CVE-2019-0559 · Nota de Segurança
• https://bdu.fstec.ru/vul/2019-00163 · Nota de Segurança
• https://osv.dev/vulnerability/CVE-2019-0559 · Aviso do Fabricante