CVE-2020-1342

State: Published
Severity: Not scored
Published: Jul 14, 2020
Updated: Aug 4, 2024
Reserved: Nov 4, 2019

Description

An information disclosure vulnerability exists when Microsoft Office software reads out of bound memory due to an uninitialized variable, which could disclose the contents of memory, aka 'Microsoft Office Information Disclosure Vulnerability'. This CVE ID is unique from CVE-2020-1445.

Scores

The record has no CVSS score.

Weaknesses

The record names no weakness.

Affected Products

Product	Versions
Microsoft SharePoint Enterprise ServerMicrosoft	2016Affected 2013 Service Pack 1Affected
Microsoft SharePoint ServerMicrosoft	2019Affected 2010 Service Pack 2Affected
Microsoft OfficeMicrosoft	2019 for 32-bit editionsAffected 2019 for 64-bit editionsAffected 2019 for MacAffected 2016 for MacAffected 2010 Service Pack 2 (32-bit editions)Affected 2010 Service Pack 2 (64-bit editions)Affected
Microsoft Office Online ServerMicrosoft	unspecifiedAffected
Microsoft 365 Apps for Enterprise for 32-bit SystemsMicrosoft	unspecifiedAffected
Microsoft 365 Apps for Enterprise for 64-bit SystemsMicrosoft	unspecifiedAffected
Microsoft WordMicrosoft	2016 (32-bit edition)Affected 2016 (64-bit edition)Affected 2010 Service Pack 2 (32-bit editions)Affected 2010 Service Pack 2 (64-bit editions)Affected 2013 RT Service Pack 1Affected 2013 Service Pack 1 (32-bit editions)Affected 2013 Service Pack 1 (64-bit editions)Affected
Microsoft Office Web AppsMicrosoft	2010 Service Pack 2Affected 2013 Service Pack 1Affected

References

https://portal.msrc.microsoft.com/en-US/security-guidance/advisory/CVE-2020-1342

Every record here comes from the CVE Program’s CVE List. © 1999–2026 The MITRE Corporation. CVE is a registered trademark of The MITRE Corporation. The records are reproduced under the CVE Program terms of use.