CVE-2019-1153: microsoft microsoft office 2019 for mac Out-of-bounds Read

Vulnerability summary

CVE-2019-1153 is a medium (CVSS 5.5) Out-of-bounds Read vulnerability in microsoft microsoft office 2019 for mac. EPSS estimates a 2.83% chance of exploitation in the next 30 days, higher than 86.5% of scored vulnerabilities. 1 public exploit is recorded.

Timeline

1. 14-08-2019
   PublishedVulnerability first disclosed.
2. 04-08-2024
   Last modifiedVulnerability information updated.

Description

An information disclosure vulnerability exists when the Microsoft Windows Graphics Component improperly handles objects in memory. An attacker who successfully exploited the vulnerability could obtain information to further compromise the user’s system. To exploit this vulnerability, an attacker would have to log on to an affected system and run a specially crafted application. The update addresses the vulnerability by correcting the way in which the Windows Graphics Component handles objects in memory.

• CWE-125Out-of-bounds ReadThe product reads data past the end, or before the beginning, of the intended buffer.