1. Home
  2. CVE Database
  3. CVE-2020-1342
MEDIUM · 5.5

CVE-2020-1342

An information disclosure vulnerability exists when Microsoft Office software reads out of bound memory due to an uninitialized variable, which could disclose the contents of memory, aka 'Microsoft Of...

Vulnerability Description

An information disclosure vulnerability exists when Microsoft Office software reads out of bound memory due to an uninitialized variable, which could disclose the contents of memory, aka 'Microsoft Office Information Disclosure Vulnerability'. This CVE ID is unique from CVE-2020-1445.

CVSS Score

5.5

MEDIUM

CVSS:3.1/AV:L/AC:L/PR:N/UI:R/S:U/C:H/I:N/A:N
Attack Vector
LOCAL
Attack Complexity
LOW
Privileges Required
NONE
User Interaction
REQUIRED
Scope
UNCHANGED
Confidentiality
HIGH
Integrity
NONE
Availability
NONE

Affected Products

VendorProductVersions
Microsoft365 Apps-
MicrosoftOffice2010
MicrosoftOffice Online Server-
MicrosoftOffice Web Apps2010
MicrosoftSharepoint Enterprise Server2013
MicrosoftSharepoint Server2010
MicrosoftWord2010

Related Weaknesses (CWE)

CWE-908CWE-125

References

FAQ

What is CVE-2020-1342?

CVE-2020-1342 is a vulnerability with a CVSS score of 5.5 (MEDIUM). An information disclosure vulnerability exists when Microsoft Office software reads out of bound memory due to an uninitialized variable, which could disclose the contents of memory, aka 'Microsoft Of...

How severe is CVE-2020-1342?

CVE-2020-1342 has been rated MEDIUM with a CVSS base score of 5.5/10. Review the CVSS metrics above for detailed severity breakdown.

Is there a patch for CVE-2020-1342?

Check the references section above for vendor advisories and patch information. Affected products include: Microsoft 365 Apps, Microsoft Office, Microsoft Office Online Server, Microsoft Office Web Apps, Microsoft Sharepoint Enterprise Server.