Kaspersky ID:
KLA11461
Detekováno:
04/09/2019
Aktualizováno:
01/22/2024

Popis

Multiple vulnerabilities were found in Microsoft Office. Malicious users can exploit these vulnerabilities to gain privileges, execute arbitrary code, spoof user interface.

Below is a complete list of vulnerabilities:

  1. A remote code execution vulnerability in Microsoft Office Access Connectivity Engine can be exploited remotely via specially crafted file to gain privileges.
  2. A remote code execution vulnerability in Microsoft Office Access Connectivity Engine can be exploited remotely via specially crafted file to execute arbitrary code.
  3. A cross-site-scripting (XSS) vulnerability Microsoft Office SharePoint can be exploited remotely via specially crafted web to spoof user interface.
  4. A remote code execution vulnerability in Microsoft Graphics Components can be exploited remotely via specially crafted file to execute arbitrary code.
  5. A remote code execution vulnerability in Microsoft Excel can be exploited remotely via specially crafted file to execute arbitrary code.
  6. A remote code execution vulnerability in Office can be exploited remotely via specially crafted to execute arbitrary code.

Oficiální doporučení

Vykořisťování

Malware exists for this vulnerability. Usually such malware is classified as Exploit. More details.

Související produkty

seznam CVE

  • CVE-2019-0824
    high
  • CVE-2019-0825
    high
  • CVE-2019-0831
    warning
  • CVE-2019-0822
    critical
  • CVE-2019-0823
    high
  • CVE-2019-0828
    critical
  • CVE-2019-0801
    high
  • CVE-2019-0826
    high
  • CVE-2019-0827
    high
  • CVE-2019-0830
    warning

seznam KB

Zobrazit více

Zjistěte statistiky zranitelností šířících se ve vaší oblasti statistics.securelist.com

Našli jste v popisu této chyby zabezpečení nepřesnost? Dej nám vědět!
Kaspersky Next
Let’s go Next: redefine your business’s cybersecurity
Zjistěte více
Kaspersky Premium
Zjistěte více
Do you want to save your changes?
Your message has been sent successfully.