Vulnerability Information
Although we use advanced large model technology, its output may still contain inaccurate or outdated information.Shenlong tries to ensure data accuracy, but please verify and judge based on the actual situation.
Vulnerability Title
N/A
Vulnerability Description
Microsoft Office 2013 and 2013 RT allows remote attackers to discover authentication tokens via a crafted response to a file-open request for an Office file on a web site, as exploited in the wild in 2013, aka "Token Hijacking Vulnerability."
CVSS Information
N/A
Vulnerability Type
N/A
Vulnerability Title
Microsoft Office 令牌劫持漏洞
Vulnerability Description
Microsoft Office是美国微软（Microsoft）公司开发的一款办公软件套件产品。常用组件有Word、Excel、Access、Powerpoint、FrontPage等。 如果受影响的Microsoft Office 2013和2013 RT软件尝试打开恶意网站上托管的Office文件时未正确处理特制响应，则存在一个信息泄露漏洞。成功利用此漏洞的攻击者可以确定用于在目标SharePoint或其他Microsoft Office Server站点上对当前用户进行身份验证的访问令牌。
CVSS Information
N/A
Vulnerability Type
N/A