Skip to content
CVE PROGRAM SOURCE RECORDUnscored

CVE-2019-0540

A security feature bypass vulnerability exists when Microsoft Office does not validate URLs.An attacker could send a victim a specially crafted file, which could trick the victim i

Read JSON ↗CVE.org ↗
Status
Published
Published
Updated
Assigning organization
microsoft

Description

A security feature bypass vulnerability exists when Microsoft Office does not validate URLs.An attacker could send a victim a specially crafted file, which could trick the victim into entering credentials, aka 'Microsoft Office Security Feature Bypass Vulnerability'.

Affected products

Version statuses are supplied by the assigning organization. Consult the original record for detailed ranges and platform conditions.

Microsoft Microsoft Office

  • 2010 Service Pack 2 (32-bit editions)affected
  • 2010 Service Pack 2 (64-bit editions)affected
  • 2013 Service Pack 1 (32-bit editions)affected
  • 2013 Service Pack 1 (64-bit editions)affected
  • 2013 RT Service Pack 1affected
  • 2016 (32-bit edition)affected
  • 2016 (64-bit edition)affected
  • 2019 for 32-bit editionsaffected
  • 2019 for 64-bit editionsaffected
  • Word Vieweraffected

Microsoft Microsoft Excel Viewer

  • unspecifiedaffected

Microsoft Office 365 ProPlus

  • 32-bit Systemsaffected
  • 64-bit Systemsaffected

Microsoft Microsoft PowerPoint Viewer

  • unspecifiedaffected

Microsoft Microsoft Office Compatibility Pack

  • Service Pack 3affected

References