Microsoft Office CVE-2019-0540 Security Bypass Vulnerability

Bugtraq ID:	106863
Class:	Input Validation Error
CVE:	CVE-2019-0540
Remote:	Yes
Local:	No
Published:	Feb 12 2019 12:00AM
Updated:	Feb 12 2019 12:00AM
Credit:	Pieter Ceelen and Stan Hegt of Outflank.
Vulnerable:	Microsoft PowerPoint Viewer 0 Microsoft Office Word Viewer 0 Microsoft Office Compatibility Pack Service Pack 3 0 Microsoft Office 365 ProPlus for 64-bit Systems 0 Microsoft Office 365 ProPlus for 32-bit Systems 0 Microsoft Office 2019 for 64-bit editions 0 Microsoft Office 2019 for 32-bit editions 0 Microsoft Office 2016 (64-bit edition) 0 Microsoft Office 2016 (32-bit edition) 0 Microsoft Office 2013 Service Pack 1 (64-bit editions) Microsoft Office 2013 Service Pack 1 (32-bit editions) Microsoft Office 2013 RT Service Pack 1 0 Microsoft Office 2010 Service Pack 2 (64-bit editions) 0 Microsoft Office 2010 Service Pack 2 (32-bit editions) 0 Microsoft Excel Viewer 0
Not Vulnerable:

Microsoft Office CVE-2019-0540 Security Bypass Vulnerability

Microsoft Office is prone to a security bypass vulnerability.

An attacker can leverage this issue to bypass certain security restrictions; this may aid in launching further attacks.

Microsoft Office CVE-2019-0540 Security Bypass Vulnerability

References:

• Microsoft Homepage (Microsoft)
  
• Microsoft Office Product Homepage (Microsoft)
  
• CVE-2019-0540 | Microsoft Office Security Feature Bypass Vulnerability (Microsoft)