Kaspersky Threats

Detect date

?

01/08/2019

Severity

?

Critical

Description

Multiple vulnerabilities were found in Microsoft Office. Malicious users can exploit these vulnerabilities to obtain sensitive information, execute arbitrary code, gain privileges, spoof user interface.

Below is a complete list of vulnerabilities:

An information disclosure vulnerability in Microsoft Office can be exploited remotely via specially designed document file to obtain sensitive information;
An information disclosure vulnerability in Microsoft Outlook can be exploited remotely via specially crafted email to obtain sensitive information;
A remote code execution vulnerability in MSHTML Engine can be exploited remotely via specially crafted file to execute arbitrary code;
An elevation of privilege vulnerability in Microsoft SharePoint can be exploited remotely via specially crafted webpage to gain privileges;
A cross-site-scripting (XSS) vulnerability Microsoft Office SharePoint can be exploited remotely via specially crafted webpage to spoof user interface;
A cross-site-scripting (XSS) vulnerability Microsoft Office SharePoint can be exploited remotely via specially crafted webpage to spoof user interface;
An elevation of privilege vulnerability in Skype for Android can be exploited remotely via specially designed request to gain privileges;
A remote code execution vulnerability in Microsoft Word can be exploited remotely via specially crafted file to execute arbitrary code;
A cross-site-scripting (XSS) vulnerability Microsoft Office SharePoint can be exploited remotely via specially crafted webpage to spoof user interface;
An information disclosure vulnerability in Microsoft Word can be exploited remotely via specially designed document file to obtain sensitive information;

Affected products

Microsoft Office 2016 (32-bit edition)
Microsoft Office 2013 Service Pack 1 (32-bit editions)
Microsoft Office 2010 Service Pack 2 (32-bit editions)
Office 365 ProPlus for 32-bit Systems
Microsoft Office 2016 (64-bit edition)
Microsoft Office 2010 Service Pack 2 (64-bit editions)
Microsoft Office 2019 for 64-bit editions
Microsoft Office 2019 for 32-bit editions
Microsoft Office 2013 RT Service Pack 1
Microsoft Office 2013 Service Pack 1 (64-bit editions)
Office 365 ProPlus for 64-bit Systems
Microsoft Outlook 2013 Service Pack 1 (32-bit editions)
Microsoft Outlook 2016 (32-bit edition)
Microsoft Outlook 2010 Service Pack 2 (64-bit editions)
Microsoft Outlook 2013 Service Pack 1 (64-bit editions)
Microsoft Outlook 2010 Service Pack 2 (32-bit editions)
Microsoft Outlook 2013 RT Service Pack 1
Microsoft Outlook 2016 (64-bit edition)
Internet Explorer 10
Internet Explorer 11
Internet Explorer 9
Microsoft Excel Viewer 2007 Service Pack 3
Microsoft Office Word Viewer
Microsoft SharePoint Enterprise Server 2013 Service Pack 1
Microsoft SharePoint Server 2019
Microsoft SharePoint Enterprise Server 2016
Microsoft Business Productivity Servers 2010 Service Pack 2
Skype 8.35 when installed on Android Devices
Microsoft Word 2013 Service Pack 1 (64-bit editions)
Microsoft Word 2010 Service Pack 2 (64-bit editions)
Microsoft Office Web Apps Server 2010 Service Pack 2
Microsoft Word 2016 (32-bit edition)
Microsoft Word 2016 (64-bit edition)
Microsoft Word 2010 Service Pack 2 (32-bit editions)
Microsoft Office 2019 for Mac
Microsoft Office Online Server
Microsoft Word 2013 RT Service Pack 1
Microsoft Word 2013 Service Pack 1 (32-bit editions)
Word Automation Services
Microsoft Office 2016 for Mac

Solution

Install necessary updates from the KB section, that are listed in your Windows Update (Windows Update usually can be accessed from the Control Panel)

Original advisories

CVE-2019-0560
CVE-2019-0559
CVE-2019-0541
CVE-2019-0562
CVE-2019-0556
CVE-2019-0558
CVE-2019-0622
CVE-2019-0585
CVE-2019-0557
CVE-2019-0561
CVE-2019-0538
CVE-2019-0582

Impacts

?

ACE

[?]

OSI

[?]

PE

[?]

SUI

[?]

Detect date ?	01/08/2019
Severity ?	Critical
Description	Multiple vulnerabilities were found in Microsoft Office. Malicious users can exploit these vulnerabilities to obtain sensitive information, execute arbitrary code, gain privileges, spoof user interface. Below is a complete list of vulnerabilities: An information disclosure vulnerability in Microsoft Office can be exploited remotely via specially designed document file to obtain sensitive information; An information disclosure vulnerability in Microsoft Outlook can be exploited remotely via specially crafted email to obtain sensitive information; A remote code execution vulnerability in MSHTML Engine can be exploited remotely via specially crafted file to execute arbitrary code; An elevation of privilege vulnerability in Microsoft SharePoint can be exploited remotely via specially crafted webpage to gain privileges; A cross-site-scripting (XSS) vulnerability Microsoft Office SharePoint can be exploited remotely via specially crafted webpage to spoof user interface; A cross-site-scripting (XSS) vulnerability Microsoft Office SharePoint can be exploited remotely via specially crafted webpage to spoof user interface; An elevation of privilege vulnerability in Skype for Android can be exploited remotely via specially designed request to gain privileges; A remote code execution vulnerability in Microsoft Word can be exploited remotely via specially crafted file to execute arbitrary code; A cross-site-scripting (XSS) vulnerability Microsoft Office SharePoint can be exploited remotely via specially crafted webpage to spoof user interface; An information disclosure vulnerability in Microsoft Word can be exploited remotely via specially designed document file to obtain sensitive information;
Affected products	Microsoft Office 2016 (32-bit edition) Microsoft Office 2013 Service Pack 1 (32-bit editions) Microsoft Office 2010 Service Pack 2 (32-bit editions) Office 365 ProPlus for 32-bit Systems Microsoft Office 2016 (64-bit edition) Microsoft Office 2010 Service Pack 2 (64-bit editions) Microsoft Office 2019 for 64-bit editions Microsoft Office 2019 for 32-bit editions Microsoft Office 2013 RT Service Pack 1 Microsoft Office 2013 Service Pack 1 (64-bit editions) Office 365 ProPlus for 64-bit Systems Microsoft Outlook 2013 Service Pack 1 (32-bit editions) Microsoft Outlook 2016 (32-bit edition) Microsoft Outlook 2010 Service Pack 2 (64-bit editions) Microsoft Outlook 2013 Service Pack 1 (64-bit editions) Microsoft Outlook 2010 Service Pack 2 (32-bit editions) Microsoft Outlook 2013 RT Service Pack 1 Microsoft Outlook 2016 (64-bit edition) Internet Explorer 10 Internet Explorer 11 Internet Explorer 9 Microsoft Excel Viewer 2007 Service Pack 3 Microsoft Office Word Viewer Microsoft SharePoint Enterprise Server 2013 Service Pack 1 Microsoft SharePoint Server 2019 Microsoft SharePoint Enterprise Server 2016 Microsoft Business Productivity Servers 2010 Service Pack 2 Skype 8.35 when installed on Android Devices Microsoft Word 2013 Service Pack 1 (64-bit editions) Microsoft Word 2010 Service Pack 2 (64-bit editions) Microsoft Office Web Apps Server 2010 Service Pack 2 Microsoft Word 2016 (32-bit edition) Microsoft Word 2016 (64-bit edition) Microsoft Word 2010 Service Pack 2 (32-bit editions) Microsoft Office 2019 for Mac Microsoft Office Online Server Microsoft Word 2013 RT Service Pack 1 Microsoft Word 2013 Service Pack 1 (32-bit editions) Word Automation Services Microsoft Office 2016 for Mac
Solution	Install necessary updates from the KB section, that are listed in your Windows Update (Windows Update usually can be accessed from the Control Panel)
Original advisories	CVE-2019-0560 CVE-2019-0559 CVE-2019-0541 CVE-2019-0562 CVE-2019-0556 CVE-2019-0558 CVE-2019-0622 CVE-2019-0585 CVE-2019-0557 CVE-2019-0561 CVE-2019-0538 CVE-2019-0582
Impacts ?	ACE [?] OSI [?] PE [?] SUI [?]
Related products	Microsoft Office Microsoft Outlook Microsoft Excel Microsoft Word
CVE-IDS ?	CVE-2019-05829.3Critical CVE-2019-05389.3Critical CVE-2019-05604.3Warning CVE-2019-05594.3Warning CVE-2019-05419.3Critical CVE-2019-05623.5Warning CVE-2019-05563.5Warning CVE-2019-05583.5Warning CVE-2019-06222.1Warning CVE-2019-05859.3Critical CVE-2019-05573.5Warning CVE-2019-05614.3Warning
KB list	4461614 4461535 4461537 4461623 4461595 4461601 3172522 4022162 4462112 2596760 2553332 4461634 4461598 4461591 4461596 4461624 4461594 4461612 4461543 4461625 4461633 4461617 4461620 4461589 4461635 4018313 4018300 4018294
Microsoft official advisories	Microsoft Security Update Guide
Exploitation	The following public exploits exists for this vulnerability: https://www.exploit-db.com/exploits/46536
	Find out the statistics of the vulnerabilities spreading in your region

KLA11396Multiple vulnerabilities in Microsoft Office

KLA11396
Multiple vulnerabilities in Microsoft Office