CVE-2019-0801

State
Published
Severity
Not scored
Published
Apr 9, 2019
Updated
Aug 4, 2024
Reserved
Nov 26, 2018

Read the record on cve.org

Description

A remote code execution vulnerability exists when Microsoft Office fails to properly handle certain files.To exploit the vulnerability, an attacker would have to convince a user to open a specially crafted URL file that points to an Excel or PowerPoint file that was also downloaded.The update addresses the vulnerability by correcting how Office handles these files., aka 'Office Remote Code Execution Vulnerability'.

Scores

The record has no CVSS score.

Weaknesses

The record names no weakness.

Affected Products

ProductVersions
Microsoft OfficeMicrosoft
  • 2010 Service Pack 2 (32-bit editions)Affected
  • 2010 Service Pack 2 (64-bit editions)Affected
  • 2013 Service Pack 1 (32-bit editions)Affected
  • 2013 Service Pack 1 (64-bit editions)Affected
  • 2013 RT Service Pack 1Affected
  • 2016 (32-bit edition)Affected
  • 2016 (64-bit edition)Affected
  • 2019 for 32-bit editionsAffected
  • 2019 for 64-bit editionsAffected
Office 365 ProPlusMicrosoft
  • 32-bit SystemsAffected
  • 64-bit SystemsAffected

References

Every record here comes from the CVE Program’s CVE List. © 1999–2026 The MITRE Corporation. CVE is a registered trademark of The MITRE Corporation. The records are reproduced under the CVE Program terms of use.