CVE-2019-0801: microsoft microsoft office Data Processing Errors

Vulnerability summary

CVE-2019-0801 is a high (CVSS 7.8) Data Processing Errors vulnerability in microsoft microsoft office. EPSS estimates a 18.52% chance of exploitation in the next 30 days, higher than 97.2% of scored vulnerabilities.

Timeline

1. 09-04-2019
   PublishedVulnerability first disclosed.
2. 04-08-2024
   Last modifiedVulnerability information updated.

Description

A remote code execution vulnerability exists when Microsoft Office fails to properly handle certain files.To exploit the vulnerability, an attacker would have to convince a user to open a specially crafted URL file that points to an Excel or PowerPoint file that was also downloaded.The update addresses the vulnerability by correcting how Office handles these files., aka 'Office Remote Code Execution Vulnerability'.

• CWE-19Data Processing ErrorsWeaknesses in this category are typically found in functionality that processes data. Data processing is the manipulation of input to retrieve or save information.