1. CVE-Search
  2. CVE-2019-0585
ID CVE-2019-0585
Summary A remote code execution vulnerability exists in Microsoft Word software when it fails to properly handle objects in memory, aka "Microsoft Word Remote Code Execution Vulnerability." This affects Word, Microsoft Office, Microsoft Office Word Viewer, Office 365 ProPlus, Microsoft SharePoint, Microsoft Office Online Server, Microsoft Word, Microsoft SharePoint Server.
References
Vulnerable Configurations
  • cpe:2.3:a:microsoft:office:2010:sp2:*:*:*:*:*:*
    cpe:2.3:a:microsoft:office:2010:sp2:*:*:*:*:*:*
  • cpe:2.3:a:microsoft:office:2016:*:*:*:*:mac_os_x:*:*
    cpe:2.3:a:microsoft:office:2016:*:*:*:*:mac_os_x:*:*
  • cpe:2.3:a:microsoft:office:2019:*:*:*:*:*:*:*
    cpe:2.3:a:microsoft:office:2019:*:*:*:*:*:*:*
  • cpe:2.3:a:microsoft:office:2019:*:*:*:*:macos:*:*
    cpe:2.3:a:microsoft:office:2019:*:*:*:*:macos:*:*
  • cpe:2.3:a:microsoft:office_365_proplus:-:*:*:*:*:*:*:*
    cpe:2.3:a:microsoft:office_365_proplus:-:*:*:*:*:*:*:*
  • cpe:2.3:a:microsoft:office_online_server:-:*:*:*:*:*:*:*
    cpe:2.3:a:microsoft:office_online_server:-:*:*:*:*:*:*:*
  • cpe:2.3:a:microsoft:office_web_apps_server:2010:sp2:*:*:*:*:*:*
    cpe:2.3:a:microsoft:office_web_apps_server:2010:sp2:*:*:*:*:*:*
  • cpe:2.3:a:microsoft:office_word_viewer:-:*:*:*:*:*:*:*
    cpe:2.3:a:microsoft:office_word_viewer:-:*:*:*:*:*:*:*
  • cpe:2.3:a:microsoft:sharepoint_server:2013:sp1:*:*:enterprise:*:*:*
    cpe:2.3:a:microsoft:sharepoint_server:2013:sp1:*:*:enterprise:*:*:*
  • cpe:2.3:a:microsoft:sharepoint_server:2016:*:*:*:enterprise:*:*:*
    cpe:2.3:a:microsoft:sharepoint_server:2016:*:*:*:enterprise:*:*:*
  • cpe:2.3:a:microsoft:sharepoint_server:2019:*:*:*:*:*:*:*
    cpe:2.3:a:microsoft:sharepoint_server:2019:*:*:*:*:*:*:*
  • cpe:2.3:a:microsoft:word:2010:sp2:*:*:*:*:*:*
    cpe:2.3:a:microsoft:word:2010:sp2:*:*:*:*:*:*
  • cpe:2.3:a:microsoft:word:2013:sp1:*:*:*:*:*:*
    cpe:2.3:a:microsoft:word:2013:sp1:*:*:*:*:*:*
  • cpe:2.3:a:microsoft:word:2013:sp1:*:*:rt:*:*:*
    cpe:2.3:a:microsoft:word:2013:sp1:*:*:rt:*:*:*
  • cpe:2.3:a:microsoft:word:2016:*:*:*:*:*:*:*
    cpe:2.3:a:microsoft:word:2016:*:*:*:*:*:*:*
  • cpe:2.3:a:microsoft:word_automation_services:-:*:*:*:*:*:*:*
    cpe:2.3:a:microsoft:word_automation_services:-:*:*:*:*:*:*:*
CVSS
Base: 9.3 (as of 24-08-2020 - 17:37)
Impact:
Exploitability:
CWE NVD-CWE-noinfo
CAPEC
Access
VectorComplexityAuthentication
NETWORK MEDIUM NONE
Impact
ConfidentialityIntegrityAvailability
COMPLETE COMPLETE COMPLETE
cvss-vector via4 AV:N/AC:M/Au:N/C:C/I:C/A:C
refmap via4
bid 106392
confirm https://portal.msrc.microsoft.com/en-US/security-guidance/advisory/CVE-2019-0585
Last major update 24-08-2020 - 17:37
Published 08-01-2019 - 21:29
Last modified 24-08-2020 - 17:37
Back to Top