description: An information disclosure vulnerability exists when Microsoft Office improperly discloses the contents of its memory, aka 'Microsoft Office Information Disclosure Vulnerability'. This CVE ID is unique from CVE-2020-1342.
problem types: Information Disclosure
affected:
{
product: Microsoft SharePoint Enterprise Server
vendor: Microsoft
versions:
status: affected, version: 2016
status: affected, version: 2013 Service Pack 1
}
{
product: Microsoft SharePoint Server
vendor: Microsoft
versions:
status: affected, version: 2019
status: affected, version: 2010 Service Pack 2
}
{
product: Microsoft Office
vendor: Microsoft
versions:
status: affected, version: 2019 for 32-bit editions
status: affected, version: 2019 for 64-bit editions
status: affected, version: 2019 for Mac
status: affected, version: 2016 for Mac
status: affected, version: 2010 Service Pack 2 (32-bit editions)
status: affected, version: 2010 Service Pack 2 (64-bit editions)
}
{
product: Microsoft Office Online Server
vendor: Microsoft
versions:
status: affected, version: unspecified
}
{
product: Microsoft 365 Apps for Enterprise for 32-bit Systems
vendor: Microsoft
versions:
status: affected, version: unspecified
}
{
product: Microsoft 365 Apps for Enterprise for 64-bit Systems
vendor: Microsoft
versions:
status: affected, version: unspecified
}
{
product: Microsoft Word
vendor: Microsoft
versions:
status: affected, version: 2016 (32-bit edition)
status: affected, version: 2016 (64-bit edition)
status: affected, version: 2010 Service Pack 2 (32-bit editions)
status: affected, version: 2010 Service Pack 2 (64-bit editions)
status: affected, version: 2013 RT Service Pack 1
status: affected, version: 2013 Service Pack 1 (32-bit editions)
status: affected, version: 2013 Service Pack 1 (64-bit editions)
}
{
product: Microsoft Office Web Apps
vendor: Microsoft
versions:
status: affected, version: 2010 Service Pack 2
status: affected, version: 2013 Service Pack 1
}
