CVE Vulnerabilities

CVE-2020-1583

Published: Aug 17, 2020 | Modified: Jan 19, 2024
CVSS 3.x
5.5
MEDIUM
Source:
NVD
CVSS:3.1/AV:L/AC:L/PR:N/UI:R/S:U/C:H/I:N/A:N
CVSS 2.x
4.3 MEDIUM
AV:N/AC:M/Au:N/C:P/I:N/A:N
RedHat/V2
RedHat/V3
Ubuntu

An information disclosure vulnerability exists when Microsoft Word improperly discloses the contents of its memory. An attacker who exploited the vulnerability could use the information to compromise the user’s computer or data. To exploit the vulnerability, an attacker could craft a special document file and then convince the user to open it. An attacker must know the memory address location where the object was created. The update addresses the vulnerability by changing the way certain Word functions handle objects in memory.

Affected Software

Name Vendor Start Version End Version
365_apps Microsoft - (including) - (including)
Office Microsoft 2010-sp2 (including) 2010-sp2 (including)
Office Microsoft 2016 (including) 2016 (including)
Office Microsoft 2019 (including) 2019 (including)
Office_online_server Microsoft - (including) - (including)
Office_web_apps Microsoft 2010-sp2 (including) 2010-sp2 (including)
Office_web_apps Microsoft 2013-sp1 (including) 2013-sp1 (including)
Sharepoint_enterprise_server Microsoft 2013-sp1 (including) 2013-sp1 (including)
Sharepoint_enterprise_server Microsoft 2016 (including) 2016 (including)
Sharepoint_server Microsoft 2010-sp2 (including) 2010-sp2 (including)
Sharepoint_server Microsoft 2019 (including) 2019 (including)
Word Microsoft 2010-sp2 (including) 2010-sp2 (including)
Word Microsoft 2013-sp1 (including) 2013-sp1 (including)
Word Microsoft 2016 (including) 2016 (including)

References