CVE-2020-1225

{"id": "CVE-2020-1225", "metrics": {"cvssMetricV2": [{"type": "Primary", "source": "nvd@nist.gov", "cvssData": {"version": "2.0", "baseScore": 9.3, "accessVector": "NETWORK", "vectorString": "AV:N/AC:M/Au:N/C:C/I:C/A:C", "authentication": "NONE", "integrityImpact": "COMPLETE", "accessComplexity": "MEDIUM", "availabilityImpact": "COMPLETE", "confidentialityImpact": "COMPLETE"}, "acInsufInfo": false, "impactScore": 10.0, "baseSeverity": "HIGH", "obtainAllPrivilege": false, "exploitabilityScore": 8.6, "obtainUserPrivilege": false, "obtainOtherPrivilege": false, "userInteractionRequired": true}], "cvssMetricV31": [{"type": "Primary", "source": "nvd@nist.gov", "cvssData": {"scope": "UNCHANGED", "version": "3.1", "baseScore": 8.8, "attackVector": "NETWORK", "baseSeverity": "HIGH", "vectorString": "CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H", "integrityImpact": "HIGH", "userInteraction": "REQUIRED", "attackComplexity": "LOW", "availabilityImpact": "HIGH", "privilegesRequired": "NONE", "confidentialityImpact": "HIGH"}, "impactScore": 5.9, "exploitabilityScore": 2.8}]}, "published": "2020-06-09T20:15:15.210", "references": [{"url": "https://portal.msrc.microsoft.com/en-US/security-guidance/advisory/CVE-2020-1225", "tags": ["Patch", "Vendor Advisory"], "source": "secure@microsoft.com"}, {"url": "https://www.talosintelligence.com/vulnerability_reports/TALOS-2020-1045", "tags": ["Third Party Advisory"], "source": "secure@microsoft.com"}, {"url": "https://portal.msrc.microsoft.com/en-US/security-guidance/advisory/CVE-2020-1225", "tags": ["Patch", "Vendor Advisory"], "source": "af854a3a-2127-422b-91ae-364da2661108"}, {"url": "https://www.talosintelligence.com/vulnerability_reports/TALOS-2020-1045", "tags": ["Third Party Advisory"], "source": "af854a3a-2127-422b-91ae-364da2661108"}], "vulnStatus": "Modified", "weaknesses": [{"type": "Primary", "source": "nvd@nist.gov", "description": [{"lang": "en", "value": "CWE-416"}]}], "descriptions": [{"lang": "en", "value": "A remote code execution vulnerability exists in Microsoft Excel software when the software fails to properly handle objects in memory, aka 'Microsoft Excel Remote Code Execution Vulnerability'. This CVE ID is unique from CVE-2020-1226."}, {"lang": "es", "value": "Se presenta una vulnerabilidad de ejecuci\u00f3n de c\u00f3digo remota en el software Microsoft Excel cuando el software presenta un fallo al manejar apropiadamente objetos en memoria, tambi\u00e9n se conoce como \"Microsoft Excel Remote Code Execution Vulnerability\". Este ID de CVE es diferente de CVE-2020-1226"}], "lastModified": "2024-11-21T05:10:01.160", "configurations": [{"nodes": [{"negate": false, "cpeMatch": [{"criteria": "cpe:2.3:a:microsoft:365_apps:-:*:*:*:enterprise:*:*:*", "vulnerable": true, "matchCriteriaId": "40C15EDD-98D4-4D06-BA06-21AE0F33C72D"}, {"criteria": "cpe:2.3:a:microsoft:excel:2010:sp2:*:*:*:*:*:*", "vulnerable": true, "matchCriteriaId": "E36D981E-E56D-46C7-9486-FC691A75C497"}, {"criteria": "cpe:2.3:a:microsoft:excel:2013:sp1:*:*:*:*:*:*", "vulnerable": true, "matchCriteriaId": "F564117D-450D-45C4-9688-AF35F630A8A7"}, {"criteria": "cpe:2.3:a:microsoft:excel:2013:sp1:*:*:rt:*:*:*", "vulnerable": true, "matchCriteriaId": "3A062169-527E-43DA-8AE0-FD4FBA1B2A9B"}, {"criteria": "cpe:2.3:a:microsoft:excel:2016:*:*:*:*:*:*:*", "vulnerable": true, "matchCriteriaId": "09BF0981-749E-470B-A7AC-95AD087797EF"}, {"criteria": "cpe:2.3:a:microsoft:office:2016:*:*:*:*:mac_os:*:*", "vulnerable": true, "matchCriteriaId": "A1A868C4-0A58-4660-9492-1BADD99D8E59"}, {"criteria": "cpe:2.3:a:microsoft:office:2019:*:*:*:*:-:*:*", "vulnerable": true, "matchCriteriaId": "C5282C83-86B8-442D-851D-B54E88E8B1F1"}, {"criteria": "cpe:2.3:a:microsoft:office:2019:*:*:*:*:mac_os:*:*", "vulnerable": true, "matchCriteriaId": "7996347F-FA43-4665-93AF-8FAA8E720D4A"}], "operator": "OR"}]}], "sourceIdentifier": "secure@microsoft.com"}