2 lines
3.8 KiB
JSON
2 lines
3.8 KiB
JSON
{"affected":[{"affectedData":[{"product":"Microsoft Office","vendor":"Microsoft","versions":[{"status":"affected","version":"2010 Service Pack 2 (32-bit editions)"},{"status":"affected","version":"2010 Service Pack 2 (64-bit editions)"},{"status":"affected","version":"2013 Service Pack 1 (32-bit editions)"},{"status":"affected","version":"2013 Service Pack 1 (64-bit editions)"},{"status":"affected","version":"2013 RT Service Pack 1"},{"status":"affected","version":"2016 (32-bit edition)"},{"status":"affected","version":"2016 (64-bit edition)"},{"status":"affected","version":"2019 for 32-bit editions"},{"status":"affected","version":"2019 for 64-bit editions"}]},{"product":"Office 365 ProPlus","vendor":"Microsoft","versions":[{"status":"affected","version":"32-bit Systems"},{"status":"affected","version":"64-bit Systems"}]}],"source":"secure@microsoft.com"}],"configurations":[{"nodes":[{"cpeMatch":[{"criteria":"cpe:2.3:a:microsoft:office:2010:sp2:*:*:*:*:*:*","matchCriteriaId":"081DE1E3-4622-4C32-8B9C-9AEC1CD20638","vulnerable":true},{"criteria":"cpe:2.3:a:microsoft:office:2013:sp1:*:*:*:*:*:*","matchCriteriaId":"120690A6-E0A1-4E36-A35A-C87109ECC064","vulnerable":true},{"criteria":"cpe:2.3:a:microsoft:office:2013:sp1:*:*:rt:*:*:*","matchCriteriaId":"F7DDFFB8-2337-4DD7-8120-56CC8EF134B4","vulnerable":true},{"criteria":"cpe:2.3:a:microsoft:office:2016:*:*:*:*:*:*:*","matchCriteriaId":"E0B3B0BC-C7C6-4687-AD72-DCA29FF9AE3A","vulnerable":true},{"criteria":"cpe:2.3:a:microsoft:office:2019:*:*:*:*:*:*:*","matchCriteriaId":"FF177984-A906-43FA-BF60-298133FBBD6B","vulnerable":true},{"criteria":"cpe:2.3:a:microsoft:office_365:-:*:*:*:proplus:*:*:*","matchCriteriaId":"42B167E5-746F-457D-821D-42EF3E3CD8B7","vulnerable":true}],"negate":false,"operator":"OR"}]}],"cveTags":[],"descriptions":[{"lang":"en","value":"An information disclosure vulnerability exists in Microsoft Office software when the software fails to properly handle objects in memory, aka 'Microsoft Office Information Disclosure Vulnerability'."},{"lang":"es","value":"Se presenta una vulnerabilidad de divulgación de información en el software de Microsoft Office cuando el software no es capaz de manejar apropiadamente objetos en la memoria, también se conoce como \"Microsoft Office Information Disclosure Vulnerability\"."}],"id":"CVE-2019-1402","lastModified":"2026-06-17T02:28:32.703","metrics":{"cvssMetricV2":[{"acInsufInfo":false,"baseSeverity":"LOW","cvssData":{"accessComplexity":"LOW","accessVector":"LOCAL","authentication":"NONE","availabilityImpact":"NONE","baseScore":2.1,"confidentialityImpact":"PARTIAL","integrityImpact":"NONE","vectorString":"AV:L/AC:L/Au:N/C:P/I:N/A:N","version":"2.0"},"exploitabilityScore":3.9,"impactScore":2.9,"obtainAllPrivilege":false,"obtainOtherPrivilege":false,"obtainUserPrivilege":false,"source":"nvd@nist.gov","type":"Primary","userInteractionRequired":false}],"cvssMetricV31":[{"cvssData":{"attackComplexity":"LOW","attackVector":"LOCAL","availabilityImpact":"NONE","baseScore":5.5,"baseSeverity":"MEDIUM","confidentialityImpact":"HIGH","integrityImpact":"NONE","privilegesRequired":"LOW","scope":"UNCHANGED","userInteraction":"NONE","vectorString":"CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:N/A:N","version":"3.1"},"exploitabilityScore":1.8,"impactScore":3.6,"source":"nvd@nist.gov","type":"Primary"}]},"published":"2019-11-12T19:15:13.347","references":[{"source":"secure@microsoft.com","tags":["Patch","Vendor Advisory"],"url":"https://portal.msrc.microsoft.com/en-US/security-guidance/advisory/CVE-2019-1402"},{"source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Patch","Vendor Advisory"],"url":"https://portal.msrc.microsoft.com/en-US/security-guidance/advisory/CVE-2019-1402"}],"sourceIdentifier":"secure@microsoft.com","vulnStatus":"Modified","weaknesses":[{"description":[{"lang":"en","value":"CWE-200"}],"source":"nvd@nist.gov","type":"Primary"}]}
|