Rapid7 Vulnerability & Exploit Database

Microsoft CVE-2020-0760: Microsoft Office Remote Code Execution Vulnerability

Free InsightVM Trial No Credit Card Necessary
2024 Attack Intel Report Latest research by Rapid7 Labs
Back to Search

Microsoft CVE-2020-0760: Microsoft Office Remote Code Execution Vulnerability

Severity
7
CVSS
(AV:N/AC:M/Au:N/C:P/I:P/A:P)
Published
04/14/2020
Created
04/15/2020
Added
04/14/2020
Modified
04/20/2020

Description

A remote code execution vulnerability exists when Microsoft Office improperly loads arbitrary type libraries, aka 'Microsoft Office Remote Code Execution Vulnerability'. This CVE ID is unique from CVE-2020-0991.

Solution(s)

  • msft-kb3162033-a8b1d5fc-bb72-463c-ba6a-74e759c76720
  • msft-kb3162033-ac86c2ca-6405-481f-ab52-51db0332d108
  • msft-kb3203462-ef195a94-cdb2-4c0f-afd0-29640b0340e2
  • msft-kb3203462-f4388de9-b80c-4b7a-8fca-6b6c019805ff
  • msft-kb4011104-6587128b-80d0-4b8a-bdc3-b019474b9310
  • msft-kb4011104-c1becadc-8079-4b95-bd57-f745a1b0f28f
  • msft-kb4032216-a86a09ca-aea1-4fb9-94a5-a481850c9fca
  • msft-kb4032216-e4ce73dd-05b3-417a-b0b4-f90e33732b23
  • msft-kb4462210-09d565e7-fd16-464f-88fa-f9b57bbd7df5
  • msft-kb4462210-ddbf92a6-a504-45dc-9bcc-848438f7f5ef
  • msft-kb4462225-cc243ecb-2ed8-48b6-8c70-67bf8857c6d8
  • msft-kb4462225-e1bf9ce7-f12e-4a7e-87cb-760a00f0ed7c
  • msft-kb4464527-db319ebc-f251-4756-9651-1a8d82490712
  • msft-kb4464527-f974da3e-9178-410f-9b0e-02fd823e674c
  • msft-kb4464544-51f8cd2e-1525-4dac-9dda-10cee7874702
  • msft-kb4464544-9c61150c-7ec3-4a92-a8bb-9246248581c2
  • msft-kb4484117-1276997e-4286-44aa-afab-427475b4a8bc
  • msft-kb4484117-e03e02e4-4dcf-45c0-97ec-e4c4426ec9e9
  • msft-kb4484125-d30df50c-767c-45c5-b030-9395947ee8b5
  • msft-kb4484125-ff414baa-7de8-4fd3-a9ad-41405181069d
  • msft-kb4484126-013ef2c3-cecd-4adc-9fb4-3d00bfb6f461
  • msft-kb4484126-e2e2760e-70c5-48d9-b1b7-8f99382c9b53
  • msft-kb4484132-28a91ff6-ca70-4eab-b145-0da3299d57ab
  • msft-kb4484132-558c0ec4-9767-4231-bce2-01c7ec39eb3e
  • msft-kb4484226-027a0882-6e67-4930-977c-1cc35255384b
  • msft-kb4484226-b688b80e-fa05-4dba-aa1c-86bf0ea92cbb
  • msft-kb4484235-24a5bbaf-1c83-49b2-ba9d-2711e06890ac
  • msft-kb4484235-60d266e8-e5bf-4d4c-bcf6-cffbb9a4f367
  • msft-kb4484244-2b00b96d-429a-45ef-b0bf-708ba557e78f
  • msft-kb4484244-e1f38f1f-fb42-41f1-b464-753df2b18f30
  • msft-kb4484281-029e5ef5-c222-4b79-8ac2-2fc44ecc6d02
  • msft-kb4484281-a3c6dda1-79b0-4edf-9839-167ada039a99
  • msft-kb4484283-30c726f2-fe23-4df8-8548-0074fccf89ca
  • msft-kb4484283-92e38244-de86-47ba-a38f-95198a3370b8
  • msft-kb4484284-71e163e0-0dad-4381-a8ec-45fcc8d37cc1
  • msft-kb4484284-983875de-5885-4775-9574-1960c535b180
  • msft-kb4484285-6e5a9b0b-1fa5-476d-b19e-5ec9e704d469
  • msft-kb4484285-f8832df9-e0bf-4a22-a792-42792a4c7233
  • msft-kb4484295-86216bb6-1421-4959-b787-d2d8a5c166a7
  • msft-kb4484295-98e118bb-6945-4139-8687-62a16061a7a8
  • msft-kb4484319-9650e44f-5b47-4ba4-acd6-71a7d0a4ac36
  • msft-kb4484319-c45105ef-f4db-46d9-8de0-8e7654da6f16

References

  • https://attackerkb.com/topics/cve-2020-0760
  • CVE - 2020-0760
  • 3128012
  • 3162033
  • 3203462
  • 4011097
  • 4011104
  • 4032216
  • 4462210
  • 4462225
  • 4464527
  • 4464544
  • 4484117
  • 4484125
  • 4484126
  • 4484132
  • 4484167
  • 4484214
  • 4484226
  • 4484235
  • 4484244
  • 4484246
  • 4484269
  • 4484273
  • 4484274
  • 4484281
  • 4484283
  • 4484284
  • 4484285
  • 4484295
  • 4484300
  • 4484319
View more

insightVM

Advanced vulnerability management analytics and reporting.
Key Features
  • Lightweight Endpoint Agent
  • Live Dashboards
  • Real Risk Prioritization
  • IT-Integrated Remediation Projects
  • Cloud, Virtual, and Container Assessment
  • Integrated Threat Feeds
  • Easy-to-Use RESTful API
  • Automation-Assisted Patching
  • Automated Containment
Free InsightVM Trial View All Features

With Rapid7 live dashboards, I have a clear view of all the assets on my network, which ones can be exploited, and what I need to do in order to reduce the risk in my environment in real-time. No other tool gives us that kind of value and insight.

– Scott Cheney, Manager of Information Security, Sierra View Medical Center

;