PT-2020-5239 · Microsoft · Office Powerpoint

Willj + 1 · Published 2020-12-08 · Updated 2023-12-31 · CVE-2020-17124

Positive Technologies (AI Summary)

CVSS v2.0

9.3

High

Base vector

AV:N/AC:M/Au:N/C:C/I:C/A:C

Name of the Vulnerable Software and Affected Versions Microsoft PowerPoint (affected versions not specified)

Description The issue is related to insufficient input validation in Microsoft PowerPoint, which can be exploited to gain access to sensitive information, execute arbitrary code, or cause a denial of service. This can be achieved by remote attackers.

Recommendations At the moment, there is no information about a newer version that contains a fix for this vulnerability.

RCE

Weakness Enumeration

CWE-20

Related Identifiers

BDU:2020-05871

CVE-2020-17124

ZDI-20-1414

Affected Products

Office Powerpoint

References · 8

• https://portal.msrc.microsoft.com/en-US/security-guidance/advisory/CVE-2020-17124 · Vendor Advisory
• https://safe-surf.ru/specialists/bulletins-nkcki/660570 · Security Note
• https://bdu.fstec.ru/vul/2020-05871 · Security Note
• https://msrc.microsoft.com/update-guide/vulnerability/CVE-2020-17124 · Vendor Advisory
• https://zerodayinitiative.com/advisories/ZDI-20-1414 · Security Note
• https://nvd.nist.gov/vuln/detail/CVE-2020-17124 · Security Note
• http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2020-17124 · Security Note
• https://osv.dev/vulnerability/CVE-2020-17124 · Vendor Advisory