Skip to content
OpenAdvisories
High · 7.8 CVE-2020-16957 EUVD-2020-8915GHSA-7ch6-cg9m-mgp4

Microsoft Office Access Connectivity Engine Remote Code Execution Vulnerability

Published Oct 16, 2020 · Updated Aug 4, 2024 · Assigned by microsoft

Description

<p>A remote code execution vulnerability exists when the Microsoft Office Access Connectivity Engine improperly handles objects in memory. An attacker who successfully exploited this vulnerability could execute arbitrary code on a victim system.</p>
<p>An attacker could exploit this vulnerability by enticing a victim to open a specially crafted file.</p>
<p>The update addresses the vulnerability by correcting the way the Microsoft Office Access Connectivity Engine handles objects in memory.</p>

Affected products

VendorProductAffectedFixed
Microsoft Microsoft Office 2019 19.0.0 – < https://aka.ms/OfficeSecurityReleases https://aka.ms/OfficeSecurityReleases
Microsoft Microsoft 365 Apps for Enterprise 16.0.1 – < https://aka.ms/OfficeSecurityReleases https://aka.ms/OfficeSecurityReleases

References