CVE-2019-0672High
Microsoft Office Access Connectivity Engine Remote Code Execution Vulnerability
🔗 CVE IDs covered (1)
📋 Description
A remote code execution vulnerability exists when the Microsoft Office Access Connectivity Engine improperly handles objects in memory. An attacker who successfully exploited this vulnerability could execute arbitrary code on a victim system. An attacker could exploit this vulnerability by enticing a victim to open a specially crafted file. The update addresses the vulnerability by correcting the way the Microsoft Office Access Connectivity Engine handles objects in memory.
🎯 Affected products11
- Microsoft Office 2010 Service Pack 2 (32-bit editions)
- Microsoft Office 2010 Service Pack 2 (64-bit editions)
- Microsoft Office 2013 RT Service Pack 1
- Microsoft Office 2013 Service Pack 1 (32-bit editions)
- Microsoft Office 2013 Service Pack 1 (64-bit editions)
- Microsoft Office 2016 (32-bit edition)
- Microsoft Office 2016 (64-bit edition)
- Microsoft Office 2019 for 32-bit editions
- Microsoft Office 2019 for 64-bit editions
- Office 365 ProPlus for 32-bit Systems
- Office 365 ProPlus for 64-bit Systems
✅ Remediation
KBClick to Run (Security Update) KB4018294 (Security Update) KB4018313 (Security Update) KB4018300 (Security Update)
🔗 References (7)
- advisoryhttps://msrc.microsoft.com/update-guide/vulnerability/CVE-2019-0672
- patchhttps://www.microsoft.com/downloads/details.aspx?familyid=e8ee8ca5-a5a3-4a34-95f5-5538423c593e
- patchhttps://www.microsoft.com/downloads/details.aspx?familyid=d5609f96-d8c4-4c91-b331-874e98a9a875
- patchhttps://www.microsoft.com/downloads/details.aspx?familyid=cca24f57-9c67-4d79-b244-c62b0cac866a
- patchhttps://www.microsoft.com/downloads/details.aspx?familyid=c0d51c34-2127-47a1-8207-ca33c5875ea5
- patchhttps://www.microsoft.com/downloads/details.aspx?familyid=ac863b85-8609-440a-864d-810a91fd6501
- patchhttps://www.microsoft.com/downloads/details.aspx?familyid=a9fb38c1-792b-460b-a893-400b9b81c155