PT-2022-5641 · Microsoft · Office+2

Rocco Calvi + 1 · Published 2022-11-08 · Updated 2023-03-10 · CVE-2022-41105

Positive Technologies (AI Summary)

CVSS v3.1

5.5

Medium

Base vector

AV:L/AC:L/PR:N/UI:R/S:U/C:H/I:N/A:N

Name of the Vulnerable Software and Affected Versions Microsoft 365 Apps for Enterprise versions (affected versions not specified) Microsoft Office versions (affected versions not specified) Microsoft Excel versions (affected versions not specified)

Description The issue is related to a lack of protection for sensitive data in Microsoft packages. Exploitation of this issue may allow an attacker to gain unauthorized access to a device using a specially crafted file.

Recommendations For Microsoft 365 Apps for Enterprise, at the moment, there is no information about a newer version that contains a fix for this vulnerability. For Microsoft Office, at the moment, there is no information about a newer version that contains a fix for this vulnerability. For Microsoft Excel, at the moment, there is no information about a newer version that contains a fix for this vulnerability.

Information Disclosure

Weakness Enumeration

CWE-200

Related Identifiers

BDU:2022-07009

CVE-2022-41105

Affected Products

365 Apps For Enterprise

Office Excel

Office

References · 6

• https://msrc.microsoft.com/update-guide/vulnerability/CVE-2022-41105 · Vendor Advisory
• https://osv.dev/vulnerability/CVE-2022-41105 · Vendor Advisory
• https://bdu.fstec.ru/vul/2022-07009 · Security Note
• https://nvd.nist.gov/vuln/detail/CVE-2022-41105 · Security Note
• https://t.me/cibsecurity/52732 · Telegram Post
• https://t.me/cvenotify/37515 · Telegram Post