Test ID:	1.3.6.1.4.1.25623.1.0.814729
Category:	Windows : Microsoft Bulletins
Title:	Microsoft Office 365 (2016 Click-to-Run) Multiple Vulnerabilities (Jan 2019)
Summary:	This host is missing an important security; update according to Microsoft Office Click-to-Run updates.
Description:	Summary: This host is missing an important security update according to Microsoft Office Click-to-Run updates. Vulnerability Insight: Multiple flaws exist due to: - An error in the way that the MSHTML engine improperly validates input. - An error when Microsoft Outlook improperly handles certain types of messages. - An error when Microsoft Office improperly discloses the contents of its memory. - An error when Microsoft Word macro buttons are used improperly. - An error in Microsoft Word software when it fails to properly handle objects in memory. Vulnerability Impact: Successful exploitation will allow an attacker to run arbitrary code in the context of the current user and gain access to sensitive information. Affected Software/OS: Microsoft Office 365 (2016 Click-to-Run). Solution: Upgrade to latest version of Microsoft Office 365 (2016 Click-to-Run) with respect to update channel used. Please see the references for more information. CVSS Score: 9.3 CVSS Vector: AV:N/AC:M/Au:N/C:C/I:C/A:C
Cross-Ref:	Common Vulnerability Exposure (CVE) ID: CVE-2019-0559 BugTraq ID: 106397 http://www.securityfocus.com/bid/106397 Common Vulnerability Exposure (CVE) ID: CVE-2019-0561 BugTraq ID: 106399 http://www.securityfocus.com/bid/106399 Common Vulnerability Exposure (CVE) ID: CVE-2019-0585 BugTraq ID: 106392 http://www.securityfocus.com/bid/106392 Common Vulnerability Exposure (CVE) ID: CVE-2019-0541 BugTraq ID: 106402 http://www.securityfocus.com/bid/106402 https://www.exploit-db.com/exploits/46536/ Common Vulnerability Exposure (CVE) ID: CVE-2019-0560 BugTraq ID: 106398 http://www.securityfocus.com/bid/106398
Copyright	Copyright (C) 2019 Greenbone AG

This is only one of 146377 vulnerability tests in our test suite. Find out more about running a complete security audit. To run a free test of this vulnerability against your system, register below.