CVE-2019-1109: Input Validation
First published: Mon Jul 15 2019(Updated: )
A spoofing vulnerability exists when Microsoft Office Javascript does not check the validity of the web page making a request to Office documents.An attacker who successfully exploited this vulnerability could read or write information in Office documents.The security update addresses the vulnerability by correcting the way that Microsoft Office Javascript verifies trusted web pages., aka 'Microsoft Office Spoofing Vulnerability'.
Credit: secure@microsoft.com
| Affected Software | Affected Version | How to fix |
|---|---|---|
| Microsoft Office | =2013-sp1 | |
| Microsoft Office | =2013-sp1 | |
| Microsoft Office | =2016 | |
| Microsoft Office | =2019 | |
| Microsoft Office 365 |
Never miss a vulnerability like this again
Sign up to SecAlerts for real-time vulnerability data matched to your software, aggregated from hundreds of sources.
Frequently Asked Questions
What is CVE-2019-1109?
CVE-2019-1109 is a spoofing vulnerability in Microsoft Office Javascript that allows attackers to read or write information in Office documents.
How does CVE-2019-1109 affect Microsoft Office?
CVE-2019-1109 affects Microsoft Office 2013 SP1, Office 2016, Office 2019, and Office 365 ProPlus.
What is the severity level of CVE-2019-1109?
CVE-2019-1109 has a severity level of 9.1, which is considered critical.
How can I fix CVE-2019-1109?
To fix CVE-2019-1109, apply the security update provided by Microsoft.
Where can I find more information about CVE-2019-1109?
You can find more information about CVE-2019-1109 at the following link: [CVE-2019-1109](https://portal.msrc.microsoft.com/en-US/security-guidance/advisory/CVE-2019-1109).
- collector/nvd-index
- agent/severity
- agent/author
- agent/references
- agent/weakness
- agent/type
- agent/description
- agent/event
- agent/first-publish-date
- agent/tags
- agent/softwarecombine
- agent/last-modified-date
- agent/remedy
- collector/mitre-cve
- source/MITRE
- vendor/microsoft
- canonical/microsoft office
- version/microsoft office/2013-sp1
- version/microsoft office/2016
- version/microsoft office/2019
- canonical/microsoft office 365