CVE-2019-0801

EPSS 18.5%

Vexday Risk Score

8Baixo

Decisão SSVC (CISA)

Track

Sem sinal de exploração → monitorar

CVSS —EPSS 18.5%KEV nãoPoC —Nuclei —Metasploit —Patch —

Ciclo de vida

09 abr 2019Publicada no NVD

Recomendação: Monitorar — sem sinal de exploração no momento.

A remote code execution vulnerability exists when Microsoft Office fails to properly handle certain files.To exploit the vulnerability, an attacker would have to convince a user to open a specially crafted URL file that points to an Excel or PowerPoint file that was also downloaded.The update addresses the vulnerability by correcting how Office handles these files., aka 'Office Remote Code Execution Vulnerability'.

Produtos afetados

Microsoft · Microsoft Office Microsoft · Office 365 ProPlus

Referências

https://portal.msrc.microsoft.com/en-US/security-guidance/advisory/CVE-2019-0801 https://www.zerodayinitiative.com/advisories/ZDI-19-358/