Site icon API Security Blog

Security Updates for Microsoft Word Products C2R (December 2019)

The Microsoft Word Products are missing a security update.
It is, therefore, affected by the following vulnerability :

– A denial of service vulnerability exists in Microsoft Word software when the software fails to properly handle objects in memory. An attacker who successfully exploited the vulnerability could cause a remote denial of service against a system. Exploitation of the vulnerability requires that a specially crafted document be sent to a vulnerable user. The security update addresses the vulnerability by correcting how Microsoft Word handles objects in memory. (CVE-2019-1461)Read More

Exit mobile version