Kaspersky ID:
KLA11461
Data de detecção:
04/09/2019
Atualizado:
01/22/2024

Descrição

Multiple vulnerabilities were found in Microsoft Office. Malicious users can exploit these vulnerabilities to gain privileges, execute arbitrary code, spoof user interface.

Below is a complete list of vulnerabilities:

  1. A remote code execution vulnerability in Microsoft Office Access Connectivity Engine can be exploited remotely via specially crafted file to gain privileges.
  2. A remote code execution vulnerability in Microsoft Office Access Connectivity Engine can be exploited remotely via specially crafted file to execute arbitrary code.
  3. A cross-site-scripting (XSS) vulnerability Microsoft Office SharePoint can be exploited remotely via specially crafted web to spoof user interface.
  4. A remote code execution vulnerability in Microsoft Graphics Components can be exploited remotely via specially crafted file to execute arbitrary code.
  5. A remote code execution vulnerability in Microsoft Excel can be exploited remotely via specially crafted file to execute arbitrary code.
  6. A remote code execution vulnerability in Office can be exploited remotely via specially crafted to execute arbitrary code.

Comunicados originais

Exploração

Malware exists for this vulnerability. Usually such malware is classified as Exploit. More details.

Produtos relacionados

Lista de CVE

  • CVE-2019-0824
    high
  • CVE-2019-0825
    high
  • CVE-2019-0831
    warning
  • CVE-2019-0822
    critical
  • CVE-2019-0823
    high
  • CVE-2019-0828
    critical
  • CVE-2019-0801
    high
  • CVE-2019-0826
    high
  • CVE-2019-0827
    high
  • CVE-2019-0830
    warning

Lista de KB

Saiba mais

Descubra as estatísticas das vulnerabilidades que se espalham em sua região statistics.securelist.com

Encontrou uma imprecisão na descrição desta vulnerabilidade? Avise-nos!
Kaspersky Next:
cibersegurança redefinida
Saber mais
Novo Kaspersky!
Sua vida dgital merece proteção completa!
Saber mais
Do you want to save your changes?
Your message has been sent successfully.