PT-2020-4027 · Microsoft · Office+1
Published
2020-09-08
·
Updated
2023-12-31
·
CVE-2020-16855
CVSS v3.1
5.5
Medium
| Vector | AV:L/AC:L/PR:N/UI:R/S:U/C:H/I:N/A:N |
Name of the Vulnerable Software and Affected Versions:
Microsoft Office for Mac (affected versions not specified)
Microsoft Office (affected versions not specified)
Description:
The issue is related to an information disclosure problem caused by reading out of bound memory due to an uninitialized variable. This could potentially disclose the contents of memory. An attacker who successfully exploits the issue could view out of bound memory. Exploitation requires a user to open a specially crafted file with an affected version of Microsoft Office software.
Recommendations:
For Microsoft Office for Mac, update the software to properly initialize the affected variable.
For Microsoft Office, update the software to properly initialize the affected variable.
As a temporary workaround, consider avoiding the use of uninitialized variables in Microsoft Office until a patch is available.
At the moment, there is no information about a newer version that contains a fix for this vulnerability.
Out of bounds Read
Use of Uninitialized Resource
Found an issue in the description? Have something to add? Feel free to write us 👾
Related Identifiers
Affected Products
Office
Office For Mac