Elevation of Privilege Vulnerability in Microsoft Office OLicenseHeartbeat Task

CVE-2020-0697

Summary

An elevation of privilege vulnerability exists in Microsoft Office's OLicenseHeartbeat task, which could allow an authenticated attacker to exploit the system by placing a specially crafted file in a designated location. Successfully exploiting this vulnerability enables the attacker to execute tasks with SYSTEM privileges, potentially leading to arbitrary file corruption and further exploitation. The issue is mitigated by a security update that enhances the validation process of the log file, addressing the underlying vulnerabilities in task execution.

References