cnvd-2022-20138
Vulnerability from cnvd
Title: Microsoft Office Word篡改漏洞
Description:
Microsoft Office是微软公司开发的一套基于Windows操作系统的办公软件套装。
Microsoft Office Word存在篡改漏洞。攻击者可利用该漏洞对文件和目录的位置具备有限的控制权。
Severity: 低
Patch Name: Microsoft Office Word篡改漏洞的补丁
Patch Description:
Microsoft Office是微软公司开发的一套基于Windows操作系统的办公软件套装。
Microsoft Office Word存在篡改漏洞。攻击者可利用该漏洞对文件和目录的位置具备有限的控制权。目前，供应商发布了安全公告及相关补丁信息，修复了此漏洞。
Formal description:
目前厂商已经发布了升级补丁以修复这个安全问题，请到厂商的主页下载： https://portal.msrc.microsoft.com/en-US/security-guidance/advisory/CVE-2022-24511
Reference: https://nvd.nist.gov/vuln/detail/CVE-2022-24511
Impacted products
| Name | ['Microsoft Word 2013 RT SP1', 'Microsoft Word 2016', 'Microsoft Office 2019', 'Microsoft 365 Apps for Enterprise', 'Microsoft Word 2013 Service Pack 1', 'Microsoft Office LTSC 2021', 'Microsoft Office LTSC for Mac 2021'] |
|---|
{
"cves": {
"cve": {
"cveNumber": "CVE-2022-24511",
"cveUrl": "https://nvd.nist.gov/vuln/detail/CVE-2022-24511"
}
},
"description": "Microsoft Office\u662f\u5fae\u8f6f\u516c\u53f8\u5f00\u53d1\u7684\u4e00\u5957\u57fa\u4e8eWindows\u64cd\u4f5c\u7cfb\u7edf\u7684\u529e\u516c\u8f6f\u4ef6\u5957\u88c5\u3002\n\nMicrosoft Office Word\u5b58\u5728\u7be1\u6539\u6f0f\u6d1e\u3002\u653b\u51fb\u8005\u53ef\u5229\u7528\u8be5\u6f0f\u6d1e\u5bf9\u6587\u4ef6\u548c\u76ee\u5f55\u7684\u4f4d\u7f6e\u5177\u5907\u6709\u9650\u7684\u63a7\u5236\u6743\u3002",
"formalWay": "\u76ee\u524d\u5382\u5546\u5df2\u7ecf\u53d1\u5e03\u4e86\u5347\u7ea7\u8865\u4e01\u4ee5\u4fee\u590d\u8fd9\u4e2a\u5b89\u5168\u95ee\u9898\uff0c\u8bf7\u5230\u5382\u5546\u7684\u4e3b\u9875\u4e0b\u8f7d\uff1a https://portal.msrc.microsoft.com/en-US/security-guidance/advisory/CVE-2022-24511",
"isEvent": "\u901a\u7528\u8f6f\u786c\u4ef6\u6f0f\u6d1e",
"number": "CNVD-2022-20138",
"openTime": "2022-03-17",
"patchDescription": "Microsoft Office\u662f\u5fae\u8f6f\u516c\u53f8\u5f00\u53d1\u7684\u4e00\u5957\u57fa\u4e8eWindows\u64cd\u4f5c\u7cfb\u7edf\u7684\u529e\u516c\u8f6f\u4ef6\u5957\u88c5\u3002\r\n\r\nMicrosoft Office Word\u5b58\u5728\u7be1\u6539\u6f0f\u6d1e\u3002\u653b\u51fb\u8005\u53ef\u5229\u7528\u8be5\u6f0f\u6d1e\u5bf9\u6587\u4ef6\u548c\u76ee\u5f55\u7684\u4f4d\u7f6e\u5177\u5907\u6709\u9650\u7684\u63a7\u5236\u6743\u3002\u76ee\u524d\uff0c\u4f9b\u5e94\u5546\u53d1\u5e03\u4e86\u5b89\u5168\u516c\u544a\u53ca\u76f8\u5173\u8865\u4e01\u4fe1\u606f\uff0c\u4fee\u590d\u4e86\u6b64\u6f0f\u6d1e\u3002",
"patchName": "Microsoft Office Word\u7be1\u6539\u6f0f\u6d1e\u7684\u8865\u4e01",
"products": {
"product": [
"Microsoft Word 2013 RT SP1",
"Microsoft Word 2016",
"Microsoft Office 2019",
"Microsoft 365 Apps for Enterprise",
"Microsoft Word 2013 Service Pack 1",
"Microsoft Office LTSC 2021",
"Microsoft Office LTSC for Mac 2021"
]
},
"referenceLink": "https://nvd.nist.gov/vuln/detail/CVE-2022-24511",
"serverity": "\u4f4e",
"submitTime": "2022-03-10",
"title": "Microsoft Office Word\u7be1\u6539\u6f0f\u6d1e"
}
Loading…
Loading…
Sightings
| Author | Source | Type | Date |
|---|
Nomenclature
- Seen: The vulnerability was mentioned, discussed, or seen somewhere by the user.
- Confirmed: The vulnerability is confirmed from an analyst perspective.
- Exploited: This vulnerability was exploited and seen by the user reporting the sighting.
- Patched: This vulnerability was successfully patched by the user reporting the sighting.
- Not exploited: This vulnerability was not exploited or seen by the user reporting the sighting.
- Not confirmed: The user expresses doubt about the veracity of the vulnerability.
- Not patched: This vulnerability was not successfully patched by the user reporting the sighting.
Loading…