2 lines
4.4 KiB
JSON
2 lines
4.4 KiB
JSON
{"affected":[{"affectedData":[{"product":"Microsoft Office","vendor":"Microsoft","versions":[{"status":"affected","version":"2019 for 32-bit editions"},{"status":"affected","version":"2019 for 64-bit editions"}]},{"product":"Microsoft 365 Apps for Enterprise for 32-bit Systems","vendor":"Microsoft","versions":[{"status":"affected","version":"unspecified"}]},{"product":"Microsoft 365 Apps for Enterprise for 64-bit Systems","vendor":"Microsoft","versions":[{"status":"affected","version":"unspecified"}]},{"product":"Microsoft Project","vendor":"Microsoft","versions":[{"status":"affected","version":"2013 Service Pack 1 (32-bit editions)"},{"status":"affected","version":"2013 Service Pack 1 (64-bit editions)"},{"status":"affected","version":"2016 (32-bit edition)"},{"status":"affected","version":"2016 (64-bit edition)"},{"status":"affected","version":"2010 Service Pack 2 (32-bit editions)"},{"status":"affected","version":"2010 Service Pack 2 (64-bit editions)"}]}],"source":"secure@microsoft.com"}],"configurations":[{"nodes":[{"cpeMatch":[{"criteria":"cpe:2.3:a:microsoft:365_apps:-:*:*:*:enterprise:*:x64:*","matchCriteriaId":"3259EBFE-AE2D-48B8-BE9A-E22BBDB31378","vulnerable":true},{"criteria":"cpe:2.3:a:microsoft:365_apps:-:*:*:*:enterprise:*:x86:*","matchCriteriaId":"CD25F492-9272-4836-832C-8439EBE64CCF","vulnerable":true},{"criteria":"cpe:2.3:a:microsoft:office:2010:sp2:*:*:*:*:x64:*","matchCriteriaId":"BB0CF266-A7EE-474A-B3D3-4A7FE33F4C2C","vulnerable":true},{"criteria":"cpe:2.3:a:microsoft:office:2010:sp2:*:*:*:*:x86:*","matchCriteriaId":"DC25ACD6-8F48-4534-AF7B-53F0D10C0843","vulnerable":true},{"criteria":"cpe:2.3:a:microsoft:office:2013:sp1:*:*:*:*:x64:*","matchCriteriaId":"24DD7E07-4BB1-4914-9CDE-5A27A9A3920E","vulnerable":true},{"criteria":"cpe:2.3:a:microsoft:office:2013:sp1:*:*:*:*:x86:*","matchCriteriaId":"ADA0E394-3B5E-4C34-955B-EAB645A37518","vulnerable":true},{"criteria":"cpe:2.3:a:microsoft:office:2019:*:*:*:*:-:*:*","matchCriteriaId":"C5282C83-86B8-442D-851D-B54E88E8B1F1","vulnerable":true},{"criteria":"cpe:2.3:a:microsoft:project_2016:-:*:*:*:*:*:x64:*","matchCriteriaId":"B12CB472-844C-40F8-8228-AF9C4BC276B3","vulnerable":true},{"criteria":"cpe:2.3:a:microsoft:project_2016:-:*:*:*:*:*:x86:*","matchCriteriaId":"ADE92B03-48F5-43A0-A40F-EF36B4C6CA6B","vulnerable":true}],"negate":false,"operator":"OR"}]}],"cveTags":[],"descriptions":[{"lang":"en","value":"A remote code execution vulnerability exists in Microsoft Project software when the software fails to check the source markup of a file, aka 'Microsoft Project Remote Code Execution Vulnerability'."},{"lang":"es","value":"Se presenta una vulnerabilidad de ejecución de código remota en el software Microsoft Project cuando el software presenta un fallo al comprobar el marcado de origen de un archivo, también se conoce como \"Microsoft Project Remote Code Execution Vulnerability\""}],"id":"CVE-2020-1449","lastModified":"2026-06-17T03:01:26.110","metrics":{"cvssMetricV2":[{"acInsufInfo":false,"baseSeverity":"HIGH","cvssData":{"accessComplexity":"MEDIUM","accessVector":"NETWORK","authentication":"NONE","availabilityImpact":"COMPLETE","baseScore":9.3,"confidentialityImpact":"COMPLETE","integrityImpact":"COMPLETE","vectorString":"AV:N/AC:M/Au:N/C:C/I:C/A:C","version":"2.0"},"exploitabilityScore":8.6,"impactScore":10.0,"obtainAllPrivilege":false,"obtainOtherPrivilege":false,"obtainUserPrivilege":false,"source":"nvd@nist.gov","type":"Primary","userInteractionRequired":true}],"cvssMetricV31":[{"cvssData":{"attackComplexity":"LOW","attackVector":"LOCAL","availabilityImpact":"HIGH","baseScore":7.8,"baseSeverity":"HIGH","confidentialityImpact":"HIGH","integrityImpact":"HIGH","privilegesRequired":"NONE","scope":"UNCHANGED","userInteraction":"REQUIRED","vectorString":"CVSS:3.1/AV:L/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H","version":"3.1"},"exploitabilityScore":1.8,"impactScore":5.9,"source":"nvd@nist.gov","type":"Primary"}]},"published":"2020-07-14T23:15:20.090","references":[{"source":"secure@microsoft.com","tags":["Patch","Vendor Advisory"],"url":"https://portal.msrc.microsoft.com/en-US/security-guidance/advisory/CVE-2020-1449"},{"source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Patch","Vendor Advisory"],"url":"https://portal.msrc.microsoft.com/en-US/security-guidance/advisory/CVE-2020-1449"}],"sourceIdentifier":"secure@microsoft.com","vulnStatus":"Modified","weaknesses":[{"description":[{"lang":"en","value":"CWE-346"}],"source":"nvd@nist.gov","type":"Primary"}]}
|