CVE-2020-1342

Опубликовано: 14 июл. 2020

Источник: nvd

CVSS3: 5.5

CVSS2: 4.3

EPSS Низкий

Описание

An information disclosure vulnerability exists when Microsoft Office software reads out of bound memory due to an uninitialized variable, which could disclose the contents of memory, aka 'Microsoft Office Information Disclosure Vulnerability'. This CVE ID is unique from CVE-2020-1445.

Ссылки

https://portal.msrc.microsoft.com/en-US/security-guidance/advisory/CVE-2020-1342
Patch
Vendor Advisory
https://portal.msrc.microsoft.com/en-US/security-guidance/advisory/CVE-2020-1342
Patch
Vendor Advisory

Уязвимые конфигурации

Конфигурация 1

Одно из

cpe:2.3:a:microsoft:365_apps:-:*:*:*:enterprise:*:*:*

cpe:2.3:a:microsoft:office:2010:sp2:*:*:*:*:*:*

cpe:2.3:a:microsoft:office:2016:*:*:*:*:macos:*:*

cpe:2.3:a:microsoft:office:2019:*:*:*:*:-:*:*

cpe:2.3:a:microsoft:office:2019:*:*:*:*:macos:*:*

cpe:2.3:a:microsoft:office_online_server:-:*:*:*:*:*:*:*

cpe:2.3:a:microsoft:office_web_apps:2010:sp2:*:*:*:*:*:*

cpe:2.3:a:microsoft:office_web_apps:2013:sp1:*:*:*:*:*:*

cpe:2.3:a:microsoft:sharepoint_enterprise_server:2013:sp1:*:*:*:*:*:*

cpe:2.3:a:microsoft:sharepoint_enterprise_server:2016:*:*:*:*:*:*:*

cpe:2.3:a:microsoft:sharepoint_server:2010:sp2:*:*:*:*:*:*

cpe:2.3:a:microsoft:sharepoint_server:2019:*:*:*:*:*:*:*

cpe:2.3:a:microsoft:word:2010:sp2:*:*:*:*:*:*

cpe:2.3:a:microsoft:word:2013:sp1:*:*:*:*:*:*

cpe:2.3:a:microsoft:word:2013:sp1:*:*:rt:*:*:*

cpe:2.3:a:microsoft:word:2016:*:*:*:*:*:*:*

EPSS

Процентиль: 93%

0.06411

Низкий

5.5 Medium

CVSS3

4.3 Medium

CVSS2

Дефекты

CWE-125

Связанные уязвимости

CVE-2020-1342

msrc

около 6 лет назад

Microsoft Office Information Disclosure Vulnerability

GHSA-mhm7-fjjw-2fgr

github

около 4 лет назад

BDU:2020-03515

CVSS3: 6.5

fstec