PT-2019-2919 · Microsoft · Outlook+7

L4Nce · Published 2019-08-13 · Updated 2024-05-29 · CVE-2019-1201

Positive Technologies (AI Summary)

CVSS v2.0

10

High

Base vector

AV:N/AC:L/Au:N/C:C/I:C/A:C

Name of the Vulnerable Software and Affected Versions Microsoft Word (affected versions not specified)

Description A remote code execution issue exists in Microsoft Word software due to its failure to properly handle objects in memory. This could allow an attacker to use a specially crafted file to perform actions in the security context of the current user. The file could then take actions on behalf of the logged-on user with the same permissions as the current user. To exploit the issue, a user must open a specially crafted file with an affected version of Microsoft Word software. Two possible email attack scenarios exist: an attacker could send a specially crafted email message to the user and wait for the user to click on the message, or an attacker could attach a specially crafted file to an email and convince the user to open it. In a web-based attack scenario, an attacker could host a website that contains a specially crafted file designed to exploit the issue.

Recommendations To mitigate the vulnerability, users who view their emails in Outlook can disable the Preview Pane feature by setting specific registry keys. For Outlook 2010, set HKEY CURRENT USERSoftwareMicrosoftOffice14.0OutlookOptions DWORD: DisableReadingPane Value: 1. For Outlook 2013, set HKEY CURRENT USERSoftwareMicrosoftOffice15.0OutlookOptions DWORD: DisableReadingPane Value: 1. For Outlook 2016, Outlook 2019, and Office 365 ProPlus, set HKEY CURRENT USERSoftwareMicrosoftOffice16.0OutlookOptions DWORD: DisableReadingPane Value: 1. At the moment, there is no information about a newer version that contains a fix for this vulnerability.

Buffer Overflow

Weakness Enumeration

CWE-119

Related Identifiers

BDU:2019-02891

CVE-2019-1201

ZDI-19-715

Affected Products

Office Word

Office 365 Proplus

Outlook

Outlook 2010

Outlook 2013

Outlook 2016

Outlook 2019

Sharepoint Server

References · 7

• https://zerodayinitiative.com/advisories/ZDI-19-715 · Security Note
• https://osv.dev/vulnerability/CVE-2019-1201 · Vendor Advisory
• http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2019-1201 · Security Note
• https://safe-surf.ru/specialists/bulletins-nkcki/629256 · Security Note
• https://portal.msrc.microsoft.com/en-US/security-guidance/advisory/CVE-2019-1201 · Vendor Advisory
• https://bdu.fstec.ru/vul/2019-02891 · Security Note
• https://nvd.nist.gov/vuln/detail/CVE-2019-1201 · Security Note