Main Vulnerability Database Vulnerabilities #VU101593

Out-of-bounds read in Microsoft products - CVE-2024-49065

Published: December 10, 2024

Vulnerability identifier: #VU101593

CSH Severity: Medium

CVSS v4: 6.7 [CVSS:4.0/AV:L/AC:L/AT:N/PR:N/UI:A/VC:N/VI:N/VA:H/SC:N/SI:N/SA:N]

CVE-ID: CVE-2024-49065

CWE-ID: CWE-125

Exploitation vector: Remote access

Exploit availability: No public exploit available

Vulnerability details

The vulnerability allows a remote attacker to perform a denial of service (DoS) attack.

The vulnerability exists due to a boundary condition in Microsoft Office. A remote attacker can trigger an out-of-bounds read error and cause a denial of service condition on the system.

Affected software

Microsoft 365 Apps for Enterprise
Microsoft Word
Microsoft Office
Microsoft SharePoint Enterprise Server
Microsoft SharePoint Server
Microsoft Office LTSC

How to mitigate CVE-2024-49065

Install updates from vendor's website.

External References

https://portal.msrc.microsoft.com/en-US/security-guidance/advisory/CVE-2024-49065

Related Security Bulletins