PT-2019-2973 · Microsoft · Windows Jet Database Engine+2
CVE-2019-1155
·
Publicado
2019-08-13
·
Atualizado
2024-05-29
CVSS v2.0
9.3
Alta
| Vetor | AV:N/AC:M/Au:N/C:C/I:C/A:C |
Name of the Vulnerable Software and Affected Versions
Windows Jet Database Engine (affected versions not specified)
Description
A remote code execution issue exists due to the improper handling of objects in memory by the Windows Jet Database Engine. This could allow an attacker to execute arbitrary code on a victim system by enticing the victim to open a specially crafted file. The issue is related to an out-of-bounds write operation in the Windows Jet Database Engine, which can be exploited using a specially crafted file.
Recommendations
At the moment, there is no information about a newer version that contains a fix for this vulnerability.
Buffer Overflow
Encontrou algum problema na descrição? Tem algo a acrescentar? Fique à vontade para nos escrever 👾
Enumeração de Fraquezas
Identificadores relacionados
Produtos afetados
Office
Windows
Windows Jet Database Engine