CVE-2019-1204— Microsoft Outlook Elevation of Privilege Vulnerability

Microsoft Outlook Elevation of Privilege Vulnerability

An elevation of privilege vulnerability exists when Microsoft Outlook initiates processing of incoming messages without sufficient validation of the formatting of the messages. An attacker who successfully exploited the vulnerability could attempt to force Outlook to load a local or remote message store (over SMB). To exploit the vulnerability, the attacker could send a specially crafted email to a victim. Outlook would then attempt to open a pre-configured message store contained in the email upon receipt of the email. This update addresses the vulnerability by ensuring Office fully validates incoming email formatting before processing message content.

N/A

N/A

Microsoft Outlook 权限许可和访问控制问题漏洞

Microsoft Outlook是美国微软（Microsoft）公司的一套电子邮件应用程序。 Microsoft Outlook中存在提权漏洞，该漏洞源于在程序处理进入的邮件时没有充分验证邮件格式。攻击者可通过向用户发送特制的邮件利用该漏洞强制Outlook加载本地或远程消息存储（通过 SMB）。以下产品及版本受到影响：Microsoft Office 2019，Office 365 ProPlus；Outlook 2010 SP2，Outlook 2013 RT SP1，Outlook 2013 SP

N/A

N/A