2 lines
2.7 KiB
JSON
2 lines
2.7 KiB
JSON
{"affected":[{"affectedData":[{"product":"Microsoft 365 Apps for Enterprise for 32-bit Systems","vendor":"Microsoft","versions":[{"status":"affected","version":"unspecified"}]},{"product":"Microsoft 365 Apps for Enterprise for 64-bit Systems","vendor":"Microsoft","versions":[{"status":"affected","version":"unspecified"}]}],"source":"secure@microsoft.com"}],"configurations":[{"nodes":[{"cpeMatch":[{"criteria":"cpe:2.3:a:microsoft:365_apps:-:*:*:*:enterprise:*:*:*","matchCriteriaId":"40C15EDD-98D4-4D06-BA06-21AE0F33C72D","vulnerable":true}],"negate":false,"operator":"OR"}]}],"cveTags":[],"descriptions":[{"lang":"en","value":"A remote code execution vulnerability exists when Microsoft Office improperly validates input before loading dynamic link library (DLL) files, aka 'Microsoft Office Remote Code Execution Vulnerability'."},{"lang":"es","value":"Se presenta una vulnerabilidad de ejecución de código remota cuando Microsoft Office comprueba inapropiadamente la entrada antes de cargar archivos dynamic link library (DLL), también se conoce como \"Microsoft Office Remote Code Execution Vulnerability\""}],"id":"CVE-2020-1458","lastModified":"2026-06-17T03:01:27.527","metrics":{"cvssMetricV2":[{"acInsufInfo":false,"baseSeverity":"HIGH","cvssData":{"accessComplexity":"MEDIUM","accessVector":"NETWORK","authentication":"NONE","availabilityImpact":"COMPLETE","baseScore":9.3,"confidentialityImpact":"COMPLETE","integrityImpact":"COMPLETE","vectorString":"AV:N/AC:M/Au:N/C:C/I:C/A:C","version":"2.0"},"exploitabilityScore":8.6,"impactScore":10.0,"obtainAllPrivilege":false,"obtainOtherPrivilege":false,"obtainUserPrivilege":false,"source":"nvd@nist.gov","type":"Primary","userInteractionRequired":true}],"cvssMetricV31":[{"cvssData":{"attackComplexity":"LOW","attackVector":"LOCAL","availabilityImpact":"HIGH","baseScore":7.8,"baseSeverity":"HIGH","confidentialityImpact":"HIGH","integrityImpact":"HIGH","privilegesRequired":"NONE","scope":"UNCHANGED","userInteraction":"REQUIRED","vectorString":"CVSS:3.1/AV:L/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H","version":"3.1"},"exploitabilityScore":1.8,"impactScore":5.9,"source":"nvd@nist.gov","type":"Primary"}]},"published":"2020-07-14T23:15:20.463","references":[{"source":"secure@microsoft.com","tags":["Patch","Vendor Advisory"],"url":"https://portal.msrc.microsoft.com/en-US/security-guidance/advisory/CVE-2020-1458"},{"source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Patch","Vendor Advisory"],"url":"https://portal.msrc.microsoft.com/en-US/security-guidance/advisory/CVE-2020-1458"}],"sourceIdentifier":"secure@microsoft.com","vulnStatus":"Modified","weaknesses":[{"description":[{"lang":"en","value":"CWE-426"}],"source":"nvd@nist.gov","type":"Primary"}]}
|