Описание
Availability of updates for Microsoft software utilizing the Autodesk FBX library
Microsoft is announcing the release of updates to address multiple vulnerabilities found in the Autodesk FBX library which is integrated into certain Microsoft applications. Details about the vulnerabilities can be found here - https://www.autodesk.com/trust/security-advisories/adsk-sa-2020-0002
Remote code execution vulnerabilities exist in Microsoft products that utilize the FBX library when processing specially crafted 3D content. An attacker who successfully exploited these vulnerabilities could gain the same user rights as the local user. Users whose accounts are configured to have fewer user rights on the system could be less impacted than users who operate with administrative user rights.
To exploit the vulnerabilities, an attacker must send a specially crafted file containing 3D content to a user and convince them to open it.
The security updates address these vulnerabilities by correcting the way 3D content is handled by Microsoft software.
FAQ
Is the Preview Pane an attack vector for this vulnerability?
No, the Preview Pane is not an attack vector.
I am running Office 2019 or Office 365 ProPlus. How do I tell if the security update for this vulnerability is included in my version of Office?
The library containing this vulnerability was incorporated into the Office cumulative update on March 10, 2020. If either the March 2020 or April 2020 update is installed on your system you are protected from this vulnerability.
I have Paint 3D or 3D Viewer installed. How do I know if I have the security update installed?
The versions that contain the update for this vulnerability are as follows:
- 3D Viewer: 7.2003.11022.0
- Paint3D: 6.2003.4017.0
To verify that you have the update installed
In the Paint 3D or 3D Viewer app:
- Click Menu
- Click Settings. The version number appears in the upper right corner under About
Alternatively, from the Start menu you can:
- Select Start, then type Paint 3D or 3D Viewer.
- Right-click on the App name to display the options menu.
- Click App settings.
- The installed version number is listed under Specifications.
Обновления
| Продукт | Статья | Обновление |
|---|---|---|
| Microsoft Office 2019 for 32-bit editions | - | |
| Microsoft Office 2019 for 64-bit editions | - | |
| Office 365 ProPlus for 32-bit Systems | - | |
| Office 365 ProPlus for 64-bit Systems | - | |
| Paint 3D | ||
| 3D Viewer |
Показывать по
Возможность эксплуатации
Publicly Disclosed
Exploited
Latest Software Release
Older Software Release
DOS