Remote Code Execution Vulnerability in Microsoft Word Software
CVE-2019-1034

7.8HIGH

Key Information:

Vendor
Microsoft
Status
Microsoft Sharepoint Server
Microsoft Word
Microsoft Office
Microsoft Office Web Apps
Vendor
CVE Published:
12 June 2019

Summary

A vulnerability in Microsoft Word allows attackers to execute arbitrary code on the user's system. This occurs due to improper handling of objects in memory, potentially leading to unauthorized access or manipulation of data. Attackers may leverage this vulnerability through crafted documents, prompting users to open these files to exploit the flaw and gain control over the affected system. It is crucial for users to apply security updates to mitigate the risks associated with this vulnerability.

Affected Version(s)

Microsoft Office 2010 Service Pack 2 (32-bit editions)

Microsoft Office 2010 Service Pack 2 (64-bit editions)

Microsoft Office 2016 for Mac

References

https://portal.msrc.microsoft.com/en-US/security-guidance...
x_refsource_MISC

CVSS V3.1

Score:
7.8
Severity:
HIGH
Confidentiality:
High
Integrity:
High
Availability:
High
Attack Vector:
Local
Attack Complexity:
Low
Privileges Required:
None
User Interaction:
Required
Scope:
Unchanged

Timeline

  • Vulnerability published

  • Vulnerability Reserved

.