CVE-2019-0801
High · 7.8CVSS
7.8
EPSS
18.5%
Published
Apr 9, 2019
CISA due date
—
The record
A remote code execution vulnerability exists when Microsoft Office fails to properly handle certain files.To exploit the vulnerability, an attacker would have to convince a user to open a specially crafted URL file that points to an Excel or PowerPoint file that was also downloaded.The update addresses the vulnerability by correcting how Office handles these files., aka 'Office Remote Code Execution Vulnerability'.
Affected packages
| Ecosystem | Package | Introduced | Fixed |
|---|
Related vulnerabilities
- CVE-2019-12828 An issue was discovered in Electronic Arts Origin before 10.5.39. CWE-19
- CVE-2019-0946 A remote code execution vulnerability exists when the Microsoft Office Access… CWE-19
- CVE-2019-0947 A remote code execution vulnerability exists when the Microsoft Office Access… CWE-19
- CVE-2019-0945 A remote code execution vulnerability exists when the Microsoft Office Access… CWE-19
- CVE-2019-0630 A remote code execution vulnerability exists in the way that the Microsoft Server Message… CWE-19
- CVE-2019-0633 A remote code execution vulnerability exists in the way that the Microsoft Server Message… CWE-19
- CVE-2009-5155 In the GNU C Library (aka glibc or libc6) before 2.28, parse_reg_exp in posix/regcomp.c… CWE-19
- CVE-2012-5357 Ektron Content Management System (CMS) before 8.02 SP5 uses the XslCompiledTransform… CWE-19