Remote Code Execution Vulnerability in Microsoft Word Software
CVE-2019-1034

7.8HIGH

Key Information:

Vendor

Microsoft
Status
Microsoft Sharepoint Enterprise Server 2016
Microsoft Sharepoint Enterprise Server 2013 Service Pack 1
Microsoft Sharepoint Server 2019
Microsoft Office 2019
Vendor
CVE Published:
12 June 2019

What is CVE-2019-1034?

A vulnerability in Microsoft Word allows attackers to execute arbitrary code on the user's system. This occurs due to improper handling of objects in memory, potentially leading to unauthorized access or manipulation of data. Attackers may leverage this vulnerability through crafted documents, prompting users to open these files to exploit the flaw and gain control over the affected system. It is crucial for users to apply security updates to mitigate the risks associated with this vulnerability.

Affected Version(s)

Microsoft Office 2010 Service Pack 2 32-bit Systems 13.0.0.0

Microsoft Office 2016 for Mac Unknown 16.0.0

Microsoft Office 2019 32-bit Systems 19.0.0

References

https://msrc.microsoft.com/update-guide/vulnerability/CVE...
vendor-advisory

EPSS Score

12% chance of being exploited in the next 30 days.

CVSS V3.1

Score:
7.8
Severity:
HIGH
Confidentiality:
High
Integrity:
High
Availability:
High
Attack Vector:
Local
Attack Complexity:
Low
Privileges Required:
None
User Interaction:
Required
Scope:
Unchanged

Timeline

  • Vulnerability published

  • Vulnerability Reserved

.