SB2019081405 - Multiple vulnerabilities in Microsoft Outlook

Description

This security bulletin contains information about 3 secuirty vulnerabilities.

1) Buffer overflow (CVE-ID: CVE-2019-1199)

The vulnerability allows a remote attacker to execute arbitrary code on the target system.

The vulnerability exists due to insufficient validation of user-supplied input when the software fails to properly handle objects in memory in Microsoft Outlook. Successful exploitation of the vulnerability allows remote code execution but requires that a user open a specially crafted file with an affected version of Microsoft Outlook software.

2) Buffer overflow (CVE-ID: CVE-2019-1200)

The vulnerability allows a remote attacker to execute arbitrary code on the target system.

The vulnerability exists due to insufficient validation of user-supplied input when the software fails to properly handle objects in memory in Microsoft Outlook. Successful exploitation of the vulnerability allows remote code execution but requires that a user open a specially crafted file with an affected version of Microsoft Outlook software.

3) Input validation error (CVE-ID: CVE-2019-1204)

The vulnerability allows a remote attacker to escalate privileges on the system.

The vulnerability exists due to insufficient validation of incoming email messages. A remote attacker can create a specially crafted email message and attempt to force Outlook to load a local or remote message store (over SMB).

Remediation

Install update from vendor's website.

References

• https://portal.msrc.microsoft.com/en-US/security-guidance/advisory/CVE-2019-1199
• https://portal.msrc.microsoft.com/en-US/security-guidance/advisory/CVE-2019-1200
• https://portal.msrc.microsoft.com/en-US/security-guidance/advisory/CVE-2019-1204