Multiple vulnerabilities in Microsoft Office
| Risk | Medium |
| Patch available | YES |
| Number of vulnerabilities | 3 |
| CVE-ID | CVE-2024-43600 CVE-2024-49059 CVE-2024-49065 |
| CWE-ID | CWE-284 CWE-59 CWE-125 |
| Exploitation vector | Network |
| Public exploit | N/A |
| Vulnerable software |
Microsoft Office Client/Desktop applications / Office applications Microsoft 365 Apps for Enterprise Client/Desktop applications / Office applications Microsoft Word Client/Desktop applications / Office applications Microsoft Office LTSC Client/Desktop applications / Other client software Microsoft SharePoint Server Server applications / Application servers Microsoft SharePoint Enterprise Server Server applications / Application servers |
| Vendor | Microsoft |
Security Bulletin
This security bulletin contains information about 3 vulnerabilities.
1) Improper access control
EUVDB-ID: #VU101592
Risk: Low
CVSSv4.0: 5.9 [CVSS:4.0/AV:L/AC:L/AT:N/PR:L/UI:N/VC:H/VI:H/VA:H/SC:N/SI:N/SA:N/E:U/U:Clear]
CVE-ID: CVE-2024-43600
CWE-ID:
CWE-284 - Improper Access Control
Exploit availability: No
DescriptionThe vulnerability allows a local user to gain unauthorized access to otherwise restricted functionality.
The vulnerability exists due to improper access restrictions in Microsoft Office. A local user can bypass implemented security restrictions and gain elevated privileges on the target system.
MitigationInstall updates from vendor's website.
Vulnerable software versionsMicrosoft Office: 2016
CPE2.3 External linkshttps://portal.msrc.microsoft.com/en-US/security-guidance/advisory/CVE-2024-43600
Q & A
Can this vulnerability be exploited remotely?
No. This vulnerability can be exploited locally. The attacker should have authentication credentials and successfully authenticate on the system.
How the attacker can exploit this vulnerability?
The attacker would have to trick the victim to visit a specially crafted website or open a file.
The attacker would have to login to the system and perform certain actions in order to exploit this vulnerability.
Is there known malware, which exploits this vulnerability?
No. We are not aware of malware exploiting this vulnerability.
2) Link following
EUVDB-ID: #VU101594
Risk: Low
CVSSv4.0: 4.4 [CVSS:4.0/AV:L/AC:L/AT:P/PR:L/UI:N/VC:H/VI:H/VA:H/SC:N/SI:N/SA:N/E:U/U:Clear]
CVE-ID: CVE-2024-49059
CWE-ID:
CWE-59 - Improper Link Resolution Before File Access ('Link Following')
Exploit availability: No
DescriptionThe vulnerability allows a local user to compromise the target system.
The vulnerability exists due to insecure link following in Microsoft Office. A local user can win a race condition and gain elevated privileges on the system.
MitigationInstall updates from vendor's website.
Vulnerable software versionsMicrosoft Office: 2016 - 2019
Microsoft Office LTSC: 2021 - 2024
Microsoft 365 Apps for Enterprise: 32-bit Systems - 64-bit Systems
CPE2.3- cpe:2.3:a:microsoft:microsoft_office_ltsc:2021:*:*:*:*:*:*:*
- cpe:2.3:a:microsoft:microsoft_office_ltsc:2024:*:*:*:*:*:*:*
- cpe:2.3:a:microsoft:microsoft_365_apps_for_enterprise:32-bit_Systems:*:*:*:*:*:*:*
- cpe:2.3:a:microsoft:microsoft_365_apps_for_enterprise:64-bit_Systems:*:*:*:*:*:*:*
https://portal.msrc.microsoft.com/en-US/security-guidance/advisory/CVE-2024-49059
Q & A
Can this vulnerability be exploited remotely?
No. This vulnerability can be exploited locally. The attacker should have authentication credentials and successfully authenticate on the system.
How the attacker can exploit this vulnerability?
The attacker would have to trick the victim to visit a specially crafted website or open a file.
The attacker would have to login to the system and perform certain actions in order to exploit this vulnerability.
Is there known malware, which exploits this vulnerability?
No. We are not aware of malware exploiting this vulnerability.
3) Out-of-bounds read
EUVDB-ID: #VU101593
Risk: Medium
CVSSv4.0: 4 [CVSS:4.0/AV:L/AC:L/AT:N/PR:N/UI:A/VC:N/VI:N/VA:H/SC:N/SI:N/SA:N/E:U/U:Green]
CVE-ID: CVE-2024-49065
CWE-ID:
CWE-125 - Out-of-bounds read
Exploit availability: No
DescriptionThe vulnerability allows a remote attacker to perform a denial of service (DoS) attack.
The vulnerability exists due to a boundary condition in Microsoft Office. A remote attacker can trigger an out-of-bounds read error and cause a denial of service condition on the system.
MitigationInstall updates from vendor's website.
Vulnerable software versionsMicrosoft SharePoint Server: 2019
Microsoft Office: 2019
Microsoft Word: 2016
Microsoft SharePoint Enterprise Server: 2016
Microsoft Office LTSC: 2021 for Mac - 2024
Microsoft 365 Apps for Enterprise: 32-bit Systems - 64-bit Systems
CPE2.3- cpe:2.3:a:microsoft:microsoft_sharepoint_server:2019:*:*:*:*:*:*:*
- cpe:2.3:a:microsoft:microsoft_word:*:*:*:*:*:microsoft_office:*:*
- cpe:2.3:a:microsoft:microsoft_sharepoint_enterprise_server:2016:*:*:*:*:*:*:*
- cpe:2.3:a:microsoft:microsoft_office_ltsc:2021:for Mac:*:*:*:*:*:*
- cpe:2.3:a:microsoft:microsoft_office_ltsc:2021:*:*:*:*:*:*:*
- cpe:2.3:a:microsoft:microsoft_office_ltsc:2024:for Mac:*:*:*:*:*:*
https://portal.msrc.microsoft.com/en-US/security-guidance/advisory/CVE-2024-49065
Q & A
Can this vulnerability be exploited remotely?
Yes. This vulnerability can be exploited by a remote non-authenticated attacker via the Internet.
How the attacker can exploit this vulnerability?
The attacker would have to trick the victim to visit a specially crafted website or open a file.
Is there known malware, which exploits this vulnerability?
No. We are not aware of malware exploiting this vulnerability.
