PT-2020-2253 · Microsoft · Office+1

Published 2020-04-14 · Updated 2021-07-21 · CVE-2020-0991

Positive Technologies (AI Summary)

CVSS v2.0

9.3

High

Base vector

AV:N/AC:M/Au:N/C:C/I:C/A:C

Name of the Vulnerable Software and Affected Versions Microsoft Office (affected versions not specified) Microsoft Office 365 (affected versions not specified)

Description A remote code execution issue exists in Microsoft Office software due to improper handling of objects in memory. This allows a remote attacker to execute arbitrary code. If the current user has administrative rights, the attacker could gain control of the affected system, install programs, view, change, or delete data, or create new accounts with full user rights. The exploitation requires a user to open a specially crafted file with an affected version of Microsoft Office.

Recommendations For Microsoft Office, update to a version that properly handles objects in memory to prevent remote code execution. For Microsoft Office 365, update to a version that properly handles objects in memory to prevent remote code execution. As a temporary workaround, consider restricting access to specially crafted files until a patch is available.

Fix

Buffer Overflow

Weakness Enumeration

CWE-119

Related Identifiers

BDU:2020-02189

CVE-2020-0991

Affected Products

Office

Office 365

References · 7

• https://bdu.fstec.ru/vul/2020-02189 · Security Note
• https://portal.msrc.microsoft.com/en-US/security-guidance/advisory/CVE-2020-0991 · Vendor Advisory
• https://nvd.nist.gov/vuln/detail/CVE-2020-0991 · Security Note
• https://safe-surf.ru/specialists/bulletins-nkcki/648016 · Security Note
• https://osv.dev/vulnerability/CVE-2020-0991 · Vendor Advisory
• http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2020-0991 · Security Note
• https://t.me/cibsecurity/11270 · Telegram Post