Multiple vulnerabilities in Microsoft Office

Описание

Multiple vulnerabilities were found in Microsoft Office. Malicious users can exploit these vulnerabilities to spoof user interface, execute arbitrary code, obtain sensitive information.

Below is a complete list of vulnerabilities:

1. A cross-site-scripting (XSS) vulnerability Microsoft Office SharePoint can be exploited remotely via specially crafted web to spoof user interface.
2. A remote code execution vulnerability in Microsoft Excel can be exploited remotely via specially crafted file to execute arbitrary code.
3. A remote code execution vulnerability in Microsoft SharePoint Server can be exploited remotely via specially crafted page to execute arbitrary code.
4. A remote code execution vulnerability in Microsoft SharePoint can be exploited remotely via specially crafted to execute arbitrary code.
5. An information disclosure vulnerability in Microsoft SharePoint can be exploited remotely to obtain sensitive information.
6. A spoofing vulnerability in Microsoft SharePoint can be exploited remotely via specially crafted web to spoof user interface.

Первичный источник обнаружения

• CVE-2020-1099
  CVE-2020-0901
  CVE-2020-1069
  CVE-2020-1024
  CVE-2020-1100
  CVE-2020-1101
  CVE-2020-1023
  CVE-2020-1103
  CVE-2020-1102
  CVE-2020-1105
  CVE-2020-1104
  CVE-2020-1107
  CVE-2020-1106
  

Связанные продукты

• Microsoft-Office
• Microsoft-Excel

Список CVE

• CVE-2020-1099
  warning
• CVE-2020-0901
  critical
• CVE-2020-1069
  high
• CVE-2020-1024
  high
• CVE-2020-1100
  warning
• CVE-2020-1101
  warning
• CVE-2020-1023
  high
• CVE-2020-1103
  warning
• CVE-2020-1102
  high
• CVE-2020-1105
  warning
• CVE-2020-1104
  warning
• CVE-2020-1107
  warning
• CVE-2020-1106
  warning

Список KB

• 4484364
• 4484383
• 4484338
• 4484336
• 4484384
• 4484332
• 4484365
• 4484352

Смотрите также

Узнай статистику распространения уязвимостей в своем регионе statistics.securelist.com