CVE-2019-0561 - An information disclosure vulnerability exists when Microsoft Word macro buttons are used improperly, aka "Microsoft Word Information Disclosure Vulnerability." This affects Microsoft Word, Office 365 ProPlus, Microsoft Office, Word

Back Back to CVE browser

MEDIUM

An information disclosure vulnerability exists when Microsoft Word macro buttons are used improperly, aka "Microsoft Word Information Disclosure Vulnerability." This affects Microsoft Word, Office 365 ProPlus, Microsoft Office, Word

Published Jan 8, 2019

5.5

MEDIUM

CVSS 3.0

EPSS 7.92%

Description

An information disclosure vulnerability exists when Microsoft Word macro buttons are used improperly, aka "Microsoft Word Information Disclosure Vulnerability." This affects Microsoft Word, Office 365 ProPlus, Microsoft Office, Word.

Affected products

Vendor Microsoft Product Microsoft Office Default
n/a
- Version
  2010 Service Pack 2 (32-bit editions)
  Status
  affected
  Constraints
  -
- Version
  2010 Service Pack 2 (64-bit editions)
  Status
  affected
  Constraints
  -
- Version
  2016 for Mac
  Status
  affected
  Constraints
  -
- Version
  2019 for 32-bit editions
  Status
  affected
  Constraints
  -
- Version
  2019 for 64-bit editions
  Status
  affected
  Constraints
  -
- Version
  2019 for Mac
  Status
  affected
  Constraints
  -
- Version
  Web Apps Server 2010 Service Pack 2
  Status
  affected
  Constraints
  -
Vendor Microsoft Product Microsoft Word Default
n/a
- Version
  2010 Service Pack 2 (32-bit editions)
  Status
  affected
  Constraints
  -
- Version
  2010 Service Pack 2 (64-bit editions)
  Status
  affected
  Constraints
  -
- Version
  2013 RT Service Pack 1
  Status
  affected
  Constraints
  -
- Version
  2013 Service Pack 1 (32-bit editions)
  Status
  affected
  Constraints
  -
- Version
  2013 Service Pack 1 (64-bit editions)
  Status
  affected
  Constraints
  -
- Version
  2016 (32-bit edition)
  Status
  affected
  Constraints
  -
- Version
  2016 (64-bit edition)
  Status
  affected
  Constraints
  -
Vendor Microsoft Product Office Default
n/a
- Version
  365 ProPlus for 32-bit Systems
  Status
  affected
  Constraints
  -
- Version
  365 ProPlus for 64-bit Systems
  Status
  affected
  Constraints
  -
Vendor Microsoft Product Word Default
n/a
- Version
  Automation Services on Microsoft SharePoint Server 2010 Service Pack 2
  Status
  affected
  Constraints
  -

Default status is the baseline for the product, each version can override it (e.g. patched versions marked unaffected).

Vendor

Product

Default status

Versions

Microsoft

Microsoft Office

n/a

Version	Status	Constraints
2010 Service Pack 2 (32-bit editions)	affected	-
2010 Service Pack 2 (64-bit editions)	affected	-
2016 for Mac	affected	-
2019 for 32-bit editions	affected	-
2019 for 64-bit editions	affected	-
2019 for Mac	affected	-
Web Apps Server 2010 Service Pack 2	affected	-

Microsoft

Microsoft Word

n/a

Version	Status	Constraints
2010 Service Pack 2 (32-bit editions)	affected	-
2010 Service Pack 2 (64-bit editions)	affected	-
2013 RT Service Pack 1	affected	-
2013 Service Pack 1 (32-bit editions)	affected	-
2013 Service Pack 1 (64-bit editions)	affected	-
2016 (32-bit edition)	affected	-
2016 (64-bit edition)	affected	-

Microsoft

Office

n/a

Version	Status	Constraints
365 ProPlus for 32-bit Systems	affected	-
365 ProPlus for 64-bit Systems	affected	-

Microsoft

Word

n/a

Version	Status	Constraints
Automation Services on Microsoft SharePoint Server 2010 Service Pack 2	affected	-

Remediation

No remediation recorded yet.

Weaknesses (0)

No CWE recorded.

References (3)

http://www.securityfocus.com/bid/106399
vdb-entryx_refsource_BIDThird Party AdvisoryVDB Entry
https://euvd.enisa.europa.eu/vulnerability/EUVD-2019-1331
Advisory
https://portal.msrc.microsoft.com/en-US/security-guidance/advisory/CVE-2019-0561
x_refsource_CONFIRMPatchVendor Advisory

Link	Providers	Tags
http://www.securityfocus.com/bid/106399		vdb-entryx_refsource_BIDThird Party AdvisoryVDB Entry
https://euvd.enisa.europa.eu/vulnerability/EUVD-2019-1331		Advisory
https://portal.msrc.microsoft.com/en-US/security-guidance/advisory/CVE-2019-0561		x_refsource_CONFIRMPatchVendor Advisory