CVE-2019-1035: Microsoft Word Table Out-Of-Bounds Access Remote Code Execution Vulnerability
First published: Wed Jun 12 2019(Updated: )
A remote code execution vulnerability exists in Microsoft Word software when it fails to properly handle objects in memory, aka 'Microsoft Word Remote Code Execution Vulnerability'. This CVE ID is unique from CVE-2019-1034.
Credit: secure@microsoft.com
| Affected Software | Affected Version | How to fix |
|---|---|---|
| Microsoft Office | =2016 | |
| Microsoft Office | =2019 | |
| Microsoft Office | =2019 | |
| Microsoft Office 365 Proplus | ||
| Microsoft Office Online Server | ||
| Microsoft SharePoint Server | =2019 | |
| Microsoft Word |
Never miss a vulnerability like this again
Sign up to SecAlerts for real-time vulnerability data matched to your software, aggregated from hundreds of sources.
Reference Links
Frequently Asked Questions
What is CVE-2019-1035?
CVE-2019-1035 is a vulnerability that allows remote attackers to execute arbitrary code on vulnerable installations of Microsoft Word.
How severe is CVE-2019-1035?
CVE-2019-1035 has a severity rating of 7.8 (critical).
Which software products are affected by CVE-2019-1035?
CVE-2019-1035 affects Microsoft Word, Microsoft Office 2016, Microsoft Office 2019, Microsoft Office 365 Proplus, Microsoft Office Online Server, and Microsoft SharePoint Server 2019.
What is the required user interaction for exploiting CVE-2019-1035?
To exploit CVE-2019-1035, the target must visit a malicious page or open a malicious file.
How can I fix CVE-2019-1035?
To fix CVE-2019-1035, apply the security updates provided by Microsoft, as mentioned in their security advisory.
- collector/nvd-index
- collector/zdi-advisory
- alias/ZDI-19-572
- alias/ZDI-CAN-8531
- alias/CVE-2019-1035
- agent/severity
- agent/references
- agent/author
- agent/type
- vendor/microsoft
- canonical/microsoft office
- version/microsoft office/2016
- version/microsoft office/2019
- canonical/microsoft office 365 proplus
- canonical/microsoft office online server
- canonical/microsoft sharepoint server
- version/microsoft sharepoint server/2019
- canonical/microsoft word