Microsoft Word 缓冲区错误漏洞

漏洞介绍

Microsoft Word是美国微软（Microsoft）公司的一套Office套件中的文字处理软件。

Microsoft Word 存在缓冲区错误漏洞,目前尚无此漏洞的相关信息，请随时关注CNNVD或厂商公告。以下产品及版本受到影响：Microsoft Word 2013 Service Pack 1 (64-bit editions),Microsoft Word 2013 Service Pack 1 (32-bit editions),Microsoft Word 2013 RT Service Pack 1,Microsoft Word 2010 Service Pack 2 (64-bit editions),Microsoft Word 2010 Service Pack 2 (32-bit editions),Microsoft SharePoint Server 2010 Service Pack 2,Microsoft Office Web Apps 2010 Service Pack 2,Microsoft Office 2010 Service Pack 2 (64-bit editions),Microsoft Office 2010 Service Pack 2 (32-bit editions),Microsoft Office Web Apps Server 2013 Service Pack 1,Microsoft Word 2016 (64-bit edition),Microsoft Word 2016 (32-bit edition),Microsoft 365 Apps for Enterprise for 64-bit Systems,Microsoft 365 Apps for Enterprise for 32-bit Systems,Microsoft Office Online Server,Microsoft Office 2019 for Mac,Microsoft Office 2019 for 64-bit editions,Microsoft Office 2019 for 32-bit editions,Microsoft SharePoint Server 2019,Microsoft SharePoint Server 2019,Microsoft SharePoint Enterprise Server 2013 Service Pack 1,Microsoft SharePoint Enterprise Server 2016,Microsoft SharePoint Enterprise Server 2016。

漏洞补丁

目前厂商已发布升级了Microsoft Word 缓冲区错误漏洞的补丁，Microsoft Word 缓冲区错误漏洞的补丁获取链接：

https://portal.msrc.microsoft.com/en-US/security-guidance/advisory/CVE-2021-1715

参考网址

来源:MISC

链接：https://portal.msrc.microsoft.com/en-US/security-guidance/advisory/CVE-2021-1715

来源:MISC

链接：https://www.zerodayinitiative.com/advisories/ZDI-21-026/

来源:vigilance.fr

链接：https://vigilance.fr/vulnerability/Microsoft-SharePoint-vulnerabilities-of-January-2021-34295

来源:msrc.microsoft.com

链接：https://msrc.microsoft.com/update-guide/vulnerability/CVE-2020-17007/CVE-2021-1715

受影响实体

暂无

信息来源

http://www.cnnvd.org.cn/web/xxk/ldxqById.tag?CNNVD=CNNVD-202101-802