7.8 - CVE-2020-0697

Executive Summary

Informations
Name	CVE-2020-0697	First vendor Publication	2020-02-11
Vendor	Cve	Last vendor Modification	2021-07-21

Security-Database Scoring CVSS v3

Cvss vector : CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H
Overall CVSS Score	7.8
Base Score	7.8	Environmental Score	7.8
impact SubScore	5.9	Temporal Score	7.8
Exploitabality Sub Score	1.8

Attack Vector	Local	Attack Complexity	Low
Privileges Required	Low	User Interaction	None
Scope	Unchanged	Confidentiality Impact	High
Integrity Impact	High	Availability Impact	High
Calculate full CVSS 3.0 Vectors scores

Security-Database Scoring CVSS v2

Cvss vector : (AV:L/AC:L/Au:N/C:C/I:C/A:C)
Cvss Base Score	7.2	Attack Range	Local
Cvss Impact Score	10	Attack Complexity	Low
Cvss Expoit Score	3.9	Authentication	None Required
Calculate full CVSS 2.0 Vectors scores

Detail

An elevation of privilege vulnerability exists in Microsoft Office OLicenseHeartbeat task, where an attacker who successfully exploited this vulnerability could run this task as SYSTEM.To exploit the vulnerability, an authenticated attacker would need to place a specially crafted file in a specific location, thereby allowing arbitrary file corruption.The security update addresses the vulnerability by correcting how the process validates the log file., aka 'Microsoft Office Tampering Vulnerability'.

Original Source

Url : http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2020-0697

CPE : Common Platform Enumeration

Type	Description	Count
Application	Microsoft Office 365 Proplus cpe:2.3:a:microsoft:office_365_proplus:-:::::::*	1

Sources (Detail)

Source	Url
MISC	https://portal.msrc.microsoft.com/en-US/security-guidance/advisory/CVE-2020-0697

Alert History

If you want to see full details history, please login or register.

Date	Informations
2021-08-05 01:36:10	Multiple Updates
2021-07-21 17:24:28	Multiple Updates
2021-05-04 13:43:40	Multiple Updates
2021-04-22 02:55:37	Multiple Updates
2020-05-23 02:34:40	First insertion