CVE-2020-1342

Опубликовано: 14 июл. 2020

Источник: nvd

CVSS3: 5.5

CVSS2: 4.3

EPSS Средний

Описание

An information disclosure vulnerability exists when Microsoft Office software reads out of bound memory due to an uninitialized variable, which could disclose the contents of memory, aka 'Microsoft Office Information Disclosure Vulnerability'. This CVE ID is unique from CVE-2020-1445.

Ссылки

https://portal.msrc.microsoft.com/en-US/security-guidance/advisory/CVE-2020-1342
Patch
Vendor Advisory
https://portal.msrc.microsoft.com/en-US/security-guidance/advisory/CVE-2020-1342
Patch
Vendor Advisory

Уязвимые конфигурации

Конфигурация 1

Одно из

cpe:2.3:a:microsoft:365_apps:-:*:*:*:enterprise:*:*:*

cpe:2.3:a:microsoft:office:2010:sp2:*:*:*:*:*:*

cpe:2.3:a:microsoft:office:2016:*:*:*:*:macos:*:*

cpe:2.3:a:microsoft:office:2019:*:*:*:*:-:*:*

cpe:2.3:a:microsoft:office:2019:*:*:*:*:macos:*:*

cpe:2.3:a:microsoft:office_online_server:-:*:*:*:*:*:*:*

cpe:2.3:a:microsoft:office_web_apps:2010:sp2:*:*:*:*:*:*

cpe:2.3:a:microsoft:office_web_apps:2013:sp1:*:*:*:*:*:*

cpe:2.3:a:microsoft:sharepoint_enterprise_server:2013:sp1:*:*:*:*:*:*

cpe:2.3:a:microsoft:sharepoint_enterprise_server:2016:*:*:*:*:*:*:*

cpe:2.3:a:microsoft:sharepoint_server:2010:sp2:*:*:*:*:*:*

cpe:2.3:a:microsoft:sharepoint_server:2019:*:*:*:*:*:*:*

cpe:2.3:a:microsoft:word:2010:sp2:*:*:*:*:*:*

cpe:2.3:a:microsoft:word:2013:sp1:*:*:*:*:*:*

cpe:2.3:a:microsoft:word:2013:sp1:*:*:rt:*:*:*

cpe:2.3:a:microsoft:word:2016:*:*:*:*:*:*:*

EPSS

Процентиль: 96%

0.24813

Средний

5.5 Medium

CVSS3

4.3 Medium

CVSS2

Дефекты

CWE-125

Связанные уязвимости

CVE-2020-1342

msrc

больше 5 лет назад

Microsoft Office Information Disclosure Vulnerability

GHSA-mhm7-fjjw-2fgr

github

больше 3 лет назад

BDU:2020-03515

CVSS3: 6.5

fstec