CVE:CVE-2019-0540
CNNVD:CNNVD-201902-356
Microsoft Office是美国微软（Microsoft）公司的一款办公软件套件产品。该产品常用组件包括Word、Excel、Access、Powerpoint、FrontPage等。
Microsoft Office中存在输入验证错误漏洞，该漏洞源于程序没有验证URLs。远程攻击者可借助特制的文件利用该漏洞实施钓鱼攻击。以下产品和版本受到影响：Microsoft Excel Viewer；Office 2010 SP2，ffice 2013 RT SP1，Office 2016，Office 2019，Office Compatibility Pack SP3，Office 365 ProPlus；Office Word Viewer；PowerPoint Viewer。
solution:Upgrade microsoft excel_viewer to a higher version than -; Upgrade microsoft office to a higher version than 2010:sp2,2013,2013:sp1,2016,2019,and avoid the version 2010:sp2,2013,2013:sp1,2016,2019; Upgrade microsoft office_365_proplus to a higher version than -; Upgrade microsoft powerpoint_viewer to a higher version than -; Upgrade microsoft word_viewer to a higher version than -