CVE-2020-1342

Name of the Vulnerable Software and Affected Versions Microsoft Office (affected versions not specified) Microsoft Office Online Server (affected versions not specified) Microsoft Office Web Apps Server (affected versions not specified) Microsoft SharePoint Server (affected versions not specified) Microsoft SharePoint Enterprise Server (affected versions not specified) Microsoft Word (affected versions not specified)

Description An information disclosure issue exists due to Microsoft Office software reading out of bound memory because of an uninitialized variable. This could disclose the contents of memory. Exploitation of the issue requires a user to open a specially crafted file with an affected version of Microsoft Office software, potentially allowing a remote attacker to gain unauthorized access to protected information.

Recommendations At the moment, there is no information about a newer version that contains a fix for this vulnerability.