CVE-2019-0801

EPSS 18.5%

Vexday Risk Score

8Bajo

Decisión SSVC (CISA)

Track

Sin señal de explotación → monitorear

CVSS —EPSS 18.5%KEV nãoPoC —Nuclei —Metasploit —Patch —

Ciclo de vida

09 abr 2019Publicada en NVD

Recomendación: Monitorear — sin señal de explotación por ahora.

A remote code execution vulnerability exists when Microsoft Office fails to properly handle certain files.To exploit the vulnerability, an attacker would have to convince a user to open a specially crafted URL file that points to an Excel or PowerPoint file that was also downloaded.The update addresses the vulnerability by correcting how Office handles these files., aka 'Office Remote Code Execution Vulnerability'.

Productos afectados

Microsoft · Microsoft Office Microsoft · Office 365 ProPlus

Referencias

https://portal.msrc.microsoft.com/en-US/security-guidance/advisory/CVE-2019-0801 https://www.zerodayinitiative.com/advisories/ZDI-19-358/