Vulnerability Description
A security feature bypass vulnerability exists when Microsoft Office does not validate URLs.An attacker could send a victim a specially crafted file, which could trick the victim into entering credentials, aka 'Microsoft Office Security Feature Bypass Vulnerability'.
CVSS Score
MEDIUM
Affected Products
| Vendor | Product | Versions |
|---|---|---|
| Microsoft | Excel Viewer | - |
| Microsoft | Office | 2010 |
| Microsoft | Office 365 Proplus | - |
| Microsoft | Powerpoint Viewer | - |
| Microsoft | Word Viewer | - |
Related Weaknesses (CWE)
References
- http://www.securityfocus.com/bid/106863Third Party AdvisoryVDB Entry
- https://portal.msrc.microsoft.com/en-US/security-guidance/advisory/CVE-2019-0540PatchVendor Advisory
- http://www.securityfocus.com/bid/106863Third Party AdvisoryVDB Entry
- https://portal.msrc.microsoft.com/en-US/security-guidance/advisory/CVE-2019-0540PatchVendor Advisory
FAQ
What is CVE-2019-0540?
CVE-2019-0540 is a vulnerability with a CVSS score of 5.5 (MEDIUM). A security feature bypass vulnerability exists when Microsoft Office does not validate URLs.An attacker could send a victim a specially crafted file, which could trick the victim into entering credent...
How severe is CVE-2019-0540?
CVE-2019-0540 has been rated MEDIUM with a CVSS base score of 5.5/10. Review the CVSS metrics above for detailed severity breakdown.
Is there a patch for CVE-2019-0540?
Check the references section above for vendor advisories and patch information. Affected products include: Microsoft Excel Viewer, Microsoft Office, Microsoft Office 365 Proplus, Microsoft Powerpoint Viewer, Microsoft Word Viewer.