CVE-2019-1200— Microsoft Outlook 缓冲区错误漏洞
一分钟漏洞结论
影响对象
Microsoft Microsoft Office 2019
利用判断
利用概率较高，应尽快评估
建议动作
优先检查厂商安全公告和参考链接中的修复版本；无法立即升级时，限制受影响服务暴露并加强监测。
Microsoft Outlook是美国微软（Microsoft）公司的一套电子邮件应用程序。 Microsoft Outlook中存在远程代码执行漏洞，该漏洞源于程序无法正确处理内存中的对象。攻击者可借助特制的文件利用该漏洞在当前用户的安全上下文中执行操作。例如，以当前登录用户身份和权限执行操作。以下产品及版本受到影响：Microsoft Office 2019，Office 365 ProPlus；Outlook 2010 SP2，Outlook 2013 RT SP1，Outlook 2013 SP
获取后续新漏洞提醒
登录后订阅
一、 漏洞 CVE-2019-1200 基础信息
漏洞信息
对漏洞内容有疑问？看看神龙的深度分析是否有帮助！
查看神龙十问 ↗
尽管我们使用了先进的大模型技术，但其输出仍可能包含不准确或过时的信息。神龙努力确保数据的准确性，但请您根据实际情况进行核实和判断。
Vulnerability Title
Microsoft Outlook Remote Code Execution Vulnerability
来源: CVE Program / CVE List V5
Vulnerability Description
A remote code execution vulnerability exists in Microsoft Outlook software when it fails to properly handle objects in memory. An attacker who successfully exploited the vulnerability could use a specially crafted file to perform actions in the security context of the current user. For example, the file could then take actions on behalf of the logged-on user with the same permissions as the current user.
To exploit the vulnerability, a user must open a specially crafted file with an affected version of Microsoft Outlook software. In an email attack scenario, an attacker could exploit the vulnerability by sending the specially crafted file to the user and convincing the user to open the file. In a web-based attack scenario, an attacker could host a website (or leverage a compromised website that accepts or hosts user-provided content) that contains a specially crafted file that is designed to exploit the vulnerability. However, an attacker would have no way to force the user to visit the website. Instead, an attacker would have to convince the user to click a link, typically by way of an enticement in an email or Instant Messenger message, and then convince the user to open the specially crafted file.
Note that the Preview Pane is not an attack vector for this vulnerability.
The security update addresses the vulnerability by correcting how Microsoft Outlook handles files in memory.
来源: CVE Program / CVE List V5
CVSS Information
N/A
来源: CVE Program / CVE List V5
Vulnerability Type
N/A
来源: CVE Program / CVE List V5
Vulnerability Title
Microsoft Outlook 缓冲区错误漏洞
来源: 中国国家信息安全漏洞库 CNNVD
Vulnerability Description
Microsoft Outlook是美国微软（Microsoft）公司的一套电子邮件应用程序。 Microsoft Outlook中存在远程代码执行漏洞，该漏洞源于程序无法正确处理内存中的对象。攻击者可借助特制的文件利用该漏洞在当前用户的安全上下文中执行操作。例如，以当前登录用户身份和权限执行操作。以下产品及版本受到影响：Microsoft Office 2019，Office 365 ProPlus；Outlook 2010 SP2，Outlook 2013 RT SP1，Outlook 2013 SP
来源: 中国国家信息安全漏洞库 CNNVD
CVSS Information
N/A
来源: 中国国家信息安全漏洞库 CNNVD
Vulnerability Type
N/A
来源: 中国国家信息安全漏洞库 CNNVD
受影响产品
| 厂商 | 产品 | 影响版本 | CPE | 订阅 |
|---|---|---|---|---|
| Microsoft | Microsoft Office 2019 | 19.0.0 ~ https://aka.ms/OfficeSecurityReleases |
cpe:2.3:a:microsoft:office:2019:*:*:*:*:*:*:*
|
|
| Microsoft | Office 365 ProPlus | 16.0.0 ~ publication |
cpe:2.3:a:microsoft:office_365_proplus:-:*:*:*:*:*:*:*
|
|
| Microsoft | Microsoft Outlook 2016 | 16.0.0.0 ~ publication |
cpe:2.3:a:microsoft:outlook:2016:*:*:*:*:x86:*:*
|
|
| Microsoft | Microsoft Outlook 2013 Service Pack 1 | 15.0.0.0 ~ publication |
cpe:2.3:a:microsoft:outlook:2013:*:*:*:*:x86:*:*
|
|
| Microsoft | Microsoft Outlook 2010 Service Pack 2 | 13.0.0.0 ~ publication |
cpe:2.3:a:microsoft:outlook:2010:sp2:*:*:*:*:*:*
|
|
二、漏洞 CVE-2019-1200 的公开POC
| # | POC 描述 | 源链接 | 神龙链接 |
|---|
AI 生成 POC
高级
未找到公开 POC。
登录以生成 AI POC三、漏洞 CVE-2019-1200 的情报信息
请登录查看更多情报信息。
CVE-2019-1200 厂商安全公告 (1)
同批安全公告 · Microsoft · 2019-08-14 · 共 88 条
| CVE-2019-1226 | 9.8 CRITICAL | Microsoft Windows Remote Desktop Services 访问控制错误漏洞 |
| CVE-2019-1222 | 9.8 CRITICAL | Microsoft Windows Remote Desktop Services 访问控制错误漏洞 |
| CVE-2019-0736 | 9.8 CRITICAL | Microsoft Windows和Windows Server DHCP客户端缓冲区错误漏洞 |
| CVE-2019-1213 | 9.8 CRITICAL | Microsoft Windows DHCP服务器缓冲区错误漏洞 |
| CVE-2019-1182 | 9.8 CRITICAL | Microsoft Windows Remote Desktop Services 访问控制错误漏洞 |
| CVE-2019-1212 | 9.8 CRITICAL | Microsoft Windows 缓冲区错误漏洞 |
| CVE-2019-1181 | 9.8 CRITICAL | Microsoft Windows Remote Desktop Services 访问控制错误漏洞 |
| CVE-2019-1152 | 8.8 HIGH | Microsoft Windows和Microsoft Windows Server 输入验证错误漏洞 |
| CVE-2019-1149 | 8.8 HIGH | Microsoft Office和Windows 输入验证错误漏洞 |
| CVE-2019-1150 | 8.8 HIGH | Microsoft Windows和Windows Server 输入验证错误漏洞 |
| CVE-2019-1151 | 8.8 HIGH | Microsoft Windows和Microsoft Office 输入验证错误漏洞 |
| CVE-2019-1145 | 8.8 HIGH | Microsoft Windows和Windows Server 输入验证错误漏洞 |
| CVE-2019-1144 | 8.8 HIGH | Microsoft Windows和Windows Server 输入验证错误漏洞 |
| CVE-2019-1140 | 8.8 HIGH | Microsoft Edge和ChakraCore 缓冲区错误漏洞 |
| CVE-2019-0720 | 8.0 HIGH | Microsoft Windows和Windows Server 输入验证错误漏洞 |
| CVE-2019-1170 | 7.9 HIGH | Microsoft Windows和Windows Server 权限许可和访问控制问题漏洞 |
| CVE-2019-1156 | 7.8 HIGH | Microsoft Windows和Windows Server Jet Database Engine 缓冲区错误漏洞 |
| CVE-2019-1164 | 7.8 HIGH | Microsoft Windows Kernel 权限许可和访问控制问题漏洞 |
| CVE-2019-1157 | 7.8 HIGH | Microsoft Windows和Windows Server Jet Database Engine 缓冲区错误漏洞 |
| CVE-2019-1155 | 7.8 HIGH | Microsoft Windows和Windows Server Jet Database Engine 缓冲区错误漏洞 |
显示前 20 条，共 88 条。 查看全部 → →
IV. Related Vulnerabilities
V. Comments for CVE-2019-1200
暂无评论