Input validation error in Microsoft products - CVE-2019-0540

Vulnerability details

The vulnerability allows a remote attacker to perform a phishing attack.

The vulnerability exists due to insufficient validation of URLs when processing Microsoft Office files. A remote attacker can create a specially crafted file, trick the victim into opening it and entering credentials.

Successful exploitation of the vulnerability may allow an attacker to perform a phishing attack and gain access to sensitive information.

Affected software

How to mitigate CVE-2019-0540

External References

• https://portal.msrc.microsoft.com/en-US/security-guidance/advisory/CVE-2019-0540

Related Security Bulletins

• Phishing attack in Microsoft Office