CVE-2020-1342

An information disclosure vulnerability exists when Microsoft Office software reads out of bound memory due to an uninitialized variable, which could disclose the contents of memory, aka 'Microsoft Office Information Disclosure Vulnerability'. This CVE ID is unique from CVE-2020-1445.

Link	Resource
https://portal.msrc.microsoft.com/en-US/security-guidance/advisory/CVE-2020-1342	Patch Vendor Advisory

Configuration 1

cpe:2.3:a:microsoft:word:2013:sp1:*:*:*:*:*:* cpe:2.3:a:microsoft:word:2016:*:*:*:*:*:*:* cpe:2.3:a:microsoft:word:2013:sp1:*:*:rt:*:*:* cpe:2.3:a:microsoft:office_web_apps:2013:sp1:*:*:*:*:*:* cpe:2.3:a:microsoft:office_web_apps:2010:sp2:*:*:*:*:*:* cpe:2.3:a:microsoft:sharepoint_server:2010:sp2:*:*:*:*:*:* cpe:2.3:a:microsoft:office:2010:sp2:*:*:*:*:*:* cpe:2.3:a:microsoft:sharepoint_enterprise_server:2016:*:*:*:*:*:*:* cpe:2.3:a:microsoft:word:2010:sp2:*:*:*:*:*:* cpe:2.3:a:microsoft:office_online_server:-:*:*:*:*:*:*:* cpe:2.3:a:microsoft:sharepoint_enterprise_server:2013:sp1:*:*:*:*:*:* cpe:2.3:a:microsoft:sharepoint_server:2019:*:*:*:*:*:*:* cpe:2.3:a:microsoft:office:2019:*:*:*:*:-:*:* cpe:2.3:a:microsoft:office:2019:*:*:*:*:macos:*:* cpe:2.3:a:microsoft:365_apps:-:*:*:*:enterprise:*:*:* cpe:2.3:a:microsoft:office:2016:*:*:*:*:macos:*:*

---

Published : 2020-07-14 11:15

Updated : 2021-07-21 11:39

---

NVD link : CVE-2020-1342

Mitre link : CVE-2020-1342

No products.

CWE-125

Out-of-bounds Read

CWE-908