PT-2020-5259 · Microsoft · 365 Apps For Enterprise+3

Kdot · Published 2020-12-08 · Updated 2023-12-31 · CVE-2020-17125

Positive Technologies (AI Summary)

CVSS v2.0

9.3

High

Base vector

AV:N/AC:M/Au:N/C:C/I:C/A:C

Name of the Vulnerable Software and Affected Versions Microsoft Excel (affected versions not specified) Microsoft Office (affected versions not specified) Microsoft Office Web Apps (affected versions not specified) Microsoft 365 Apps for Enterprise (affected versions not specified)

Description The issue is related to a use-after-free vulnerability in Microsoft Excel, allowing remote attackers to execute arbitrary code, access protected information, or cause a denial of service. This can be exploited through the parsing of XLS files.

Recommendations For Microsoft Excel, consider disabling the XLS file parsing functionality until a patch is available. For Microsoft Office, restrict access to potentially vulnerable components to minimize the risk of exploitation. For Microsoft Office Web Apps, avoid using the service for handling sensitive documents until the issue is resolved. For Microsoft 365 Apps for Enterprise, apply configuration changes to limit the impact of the vulnerability, such as restricting file types that can be opened in Microsoft Excel. At the moment, there is no information about a newer version that contains a fix for this vulnerability.

Use After Free

Weakness Enumeration

CWE-416

Related Identifiers

BDU:2020-05892

CVE-2020-17125

ZDI-20-1424

Affected Products

365 Apps For Enterprise

Office Excel

Office

Office Web Apps

References · 25

• https://msrc.microsoft.com/update-guide/vulnerability/CVE-2020-17125 · Vendor Advisory
• https://osv.dev/vulnerability/CVE-2020-17125 · Vendor Advisory
• https://nvd.nist.gov/vuln/detail/CVE-2020-17125 · Security Note
• https://zerodayinitiative.com/advisories/ZDI-20-1424 · Security Note
• https://portal.msrc.microsoft.com/en-US/security-guidance/advisory/CVE-2020-17125 · Vendor Advisory
• http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2020-17125 · Security Note
• https://bdu.fstec.ru/vul/2020-05892 · Security Note
• https://t.me/cvenotify/7020 · Telegram Post
• https://t.me/cibsecurity/18390 · Telegram Post
• https://t.me/cvenotify/6901 · Telegram Post
• https://t.me/cibsecurity/18410 · Telegram Post
• https://t.me/cibsecurity/18532 · Telegram Post
• https://t.me/cibsecurity/18420 · Telegram Post
• https://t.me/cibsecurity/18452 · Telegram Post
• https://t.me/cvenotify/7021 · Telegram Post