CVE-2019-1449
N/A
N/A
Summary
A security feature bypass vulnerability exists in the way that Office Click-to-Run (C2R) components handle a specially crafted file, which could lead to a standard user, any AppContainer sandbox, and Office LPAC Protected View to escalate privileges to SYSTEM.To exploit this bug, an attacker would have to run a specially crafted file, aka 'Microsoft Office ClickToRun Security Feature Bypass Vulnerability'.
Affected Software
| Vendor | Product | Version Range | Status |
|---|---|---|---|
| Microsoft | Microsoft Office | 2019 for 32-bit editions | affected |
| Microsoft | Microsoft Office | 2019 for 64-bit editions | affected |
| Microsoft | Office 365 ProPlus | 32-bit Systems | affected |
| Microsoft | Office 365 ProPlus | 64-bit Systems | affected |
Weaknesses
- Security Feature Bypass
ADP Enrichment
CVE Program Container
Additional References
References
Feedback
Was this page helpful?
Glad to hear it! Please tell us how we can improve.
Sorry to hear that. Please tell us how we can improve.