CVE-2019-0541

Published Jan 8, 2019

Last updated a month ago

Exploit known CVSS high 8.8

Overview

Description: A remote code execution vulnerability exists in the way that the MSHTML engine inproperly validates input, aka "MSHTML Engine Remote Code Execution Vulnerability." This affects Microsoft Office, Microsoft Office Word Viewer, Internet Explorer 9, Internet Explorer 11, Microsoft Excel Viewer, Internet Explorer 10, Office 365 ProPlus.
Source: secure@microsoft.com
NVD status: Analyzed

Risk scores

CVSS 3.1

Type: Primary
Base score: 8.8
Impact score: 5.9
Exploitability score: 2.8
Vector string: CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H
Severity: HIGH

CVSS 2.0

Type: Primary
Base score: 9.3
Impact score: 10
Exploitability score: 8.6
Vector string: AV:N/AC:M/Au:N/C:C/I:C/A:C

Known exploits

Data from CISA

Vulnerability name: Microsoft MSHTML Remote Code Execution Vulnerability
Exploit added on: Nov 3, 2021
Exploit action due: May 3, 2022
Required action: Apply updates per vendor instructions.

Weaknesses

nvd@nist.gov: CWE-77
134c704f-9b21-4f2e-91b3-4a467353bcc0: CWE-77

Hype score: Not currently trending

Configurations

[
  {
    "nodes": [
      {
        "negate": false,
        "cpeMatch": [
          {
            "criteria": "cpe:2.3:a:microsoft:internet_explorer:11:*:*:*:*:*:*:*",
            "vulnerable": true,
            "matchCriteriaId": "15BAAA8C-7AF1-46CE-9FFB-3A498508A1BF"
          }
        ],
        "operator": "OR"
      },
      {
        "negate": false,
        "cpeMatch": [
          {
            "criteria": "cpe:2.3:o:microsoft:windows_10_1507:-:*:*:*:*:*:x64:*",
            "vulnerable": false,
            "matchCriteriaId": "A045AC0A-471E-444C-B3B0-4CABC23E8CFB"
          },
          {
            "criteria": "cpe:2.3:o:microsoft:windows_10_1507:-:*:*:*:*:*:x86:*",
            "vulnerable": false,
            "matchCriteriaId": "28A7FEE9-B473-48A0-B0ED-A5CC1E44194C"
          },
          {
            "criteria": "cpe:2.3:o:microsoft:windows_10_1607:-:*:*:*:*:*:x64:*",
            "vulnerable": false,
            "matchCriteriaId": "5E491E46-1917-41FE-8F9A-BB0BDDEB42C3"
          },
          {
            "criteria": "cpe:2.3:o:microsoft:windows_10_1607:-:*:*:*:*:*:x86:*",
            "vulnerable": false,
            "matchCriteriaId": "0A1BC97A-263E-4291-8AEF-02EE4E6031E9"
          },
          {
            "criteria": "cpe:2.3:o:microsoft:windows_10_1703:-:*:*:*:*:*:x64:*",
            "vulnerable": false,
            "matchCriteriaId": "B98DB3FF-CC3B-4E9F-A9CC-EC4C89AF3B31"
          },
          {
            "criteria": "cpe:2.3:o:microsoft:windows_10_1703:-:*:*:*:*:*:x86:*",
            "vulnerable": false,
            "matchCriteriaId": "8733BF37-7BF2-409D-9452-DA8A92DA1124"
          },
          {
            "criteria": "cpe:2.3:o:microsoft:windows_10_1709:-:*:*:*:*:*:arm64:*",
            "vulnerable": false,
            "matchCriteriaId": "555C22C7-356D-4DA7-8CED-DA7423BBC6CF"
          },
          {
            "criteria": "cpe:2.3:o:microsoft:windows_10_1709:-:*:*:*:*:*:x64:*",
            "vulnerable": false,
            "matchCriteriaId": "469F95D3-ABBB-4F1A-A000-BE0F6BD60FF6"
          },
          {
            "criteria": "cpe:2.3:o:microsoft:windows_10_1709:-:*:*:*:*:*:x86:*",
            "vulnerable": false,
            "matchCriteriaId": "D76003FB-EE99-4D8E-B6A0-B13C2041E5A0"
          },
          {
            "criteria": "cpe:2.3:o:microsoft:windows_10_1803:-:*:*:*:*:*:arm64:*",
            "vulnerable": false,
            "matchCriteriaId": "40151476-C0FD-4336-8194-039E8827B7C8"
          },
          {
            "criteria": "cpe:2.3:o:microsoft:windows_10_1803:-:*:*:*:*:*:x64:*",
            "vulnerable": false,
            "matchCriteriaId": "D82F8AF7-ED01-4649-849E-F248F0E02384"
          },
          {
            "criteria": "cpe:2.3:o:microsoft:windows_10_1803:-:*:*:*:*:*:x86:*",
            "vulnerable": false,
            "matchCriteriaId": "C1CFB53B-B17B-47BD-BAC1-C6C5D168FFB6"
          },
          {
            "criteria": "cpe:2.3:o:microsoft:windows_10_1809:-:*:*:*:*:*:arm64:*",
            "vulnerable": false,
            "matchCriteriaId": "73D24713-D897-408D-893B-77A61982597D"
          },
          {
            "criteria": "cpe:2.3:o:microsoft:windows_10_1809:-:*:*:*:*:*:x64:*",
            "vulnerable": false,
            "matchCriteriaId": "306B7CE6-8239-4AED-9ED4-4C9F5B349F58"
          },
          {
            "criteria": "cpe:2.3:o:microsoft:windows_10_1809:-:*:*:*:*:*:x86:*",
            "vulnerable": false,
            "matchCriteriaId": "345FCD64-D37B-425B-B64C-8B1640B7E850"
          },
          {
            "criteria": "cpe:2.3:o:microsoft:windows_7:-:sp1:*:*:*:*:*:*",
            "vulnerable": false,
            "matchCriteriaId": "C2B1C231-DE19-4B8F-A4AA-5B3A65276E46"
          },
          {
            "criteria": "cpe:2.3:o:microsoft:windows_8.1:-:*:*:*:*:*:*:*",
            "vulnerable": false,
            "matchCriteriaId": "E93068DB-549B-45AB-8E5C-00EB5D8B5CF8"
          },
          {
            "criteria": "cpe:2.3:o:microsoft:windows_rt_8.1:-:*:*:*:*:*:*:*",
            "vulnerable": false,
            "matchCriteriaId": "C6CE5198-C498-4672-AF4C-77AB4BE06C5C"
          },
          {
            "criteria": "cpe:2.3:o:microsoft:windows_server_2008:r2:sp1:*:*:*:*:x64:*",
            "vulnerable": false,
            "matchCriteriaId": "AF07A81D-12E5-4B1D-BFF9-C8D08C32FF4F"
          },
          {
            "criteria": "cpe:2.3:o:microsoft:windows_server_2012:r2:*:*:*:*:*:*:*",
            "vulnerable": false,
            "matchCriteriaId": "DB18C4CE-5917-401E-ACF7-2747084FD36E"
          },
          {
            "criteria": "cpe:2.3:o:microsoft:windows_server_2016:-:*:*:*:*:*:*:*",
            "vulnerable": false,
            "matchCriteriaId": "041FF8BA-0B12-4A1F-B4BF-9C4F33B7C1E7"
          },
          {
            "criteria": "cpe:2.3:o:microsoft:windows_server_2019:-:*:*:*:*:*:*:*",
            "vulnerable": false,
            "matchCriteriaId": "DB79EE26-FC32-417D-A49C-A1A63165A968"
          }
        ],
        "operator": "OR"
      }
    ],
    "operator": "AND"
  },
  {
    "nodes": [
      {
        "negate": false,
        "cpeMatch": [
          {
            "criteria": "cpe:2.3:a:microsoft:excel_viewer:2007:sp3:*:*:*:*:*:*",
            "vulnerable": true,
            "matchCriteriaId": "E4635DA5-27DA-43FF-92AC-A9F80218A2F0"
          },
          {
            "criteria": "cpe:2.3:a:microsoft:office:2010:sp2:*:*:*:*:*:*",
            "vulnerable": true,
            "matchCriteriaId": "081DE1E3-4622-4C32-8B9C-9AEC1CD20638"
          },
          {
            "criteria": "cpe:2.3:a:microsoft:office:2013:sp1:*:*:*:*:*:*",
            "vulnerable": true,
            "matchCriteriaId": "120690A6-E0A1-4E36-A35A-C87109ECC064"
          },
          {
            "criteria": "cpe:2.3:a:microsoft:office:2013:sp1:*:*:rt:*:*:*",
            "vulnerable": true,
            "matchCriteriaId": "F7DDFFB8-2337-4DD7-8120-56CC8EF134B4"
          },
          {
            "criteria": "cpe:2.3:a:microsoft:office:2016:*:*:*:*:*:*:*",
            "vulnerable": true,
            "matchCriteriaId": "E0B3B0BC-C7C6-4687-AD72-DCA29FF9AE3A"
          },
          {
            "criteria": "cpe:2.3:a:microsoft:office:2019:*:*:*:*:*:*:*",
            "vulnerable": true,
            "matchCriteriaId": "FF177984-A906-43FA-BF60-298133FBBD6B"
          },
          {
            "criteria": "cpe:2.3:a:microsoft:office_365_proplus:-:*:*:*:*:*:*:*",
            "vulnerable": true,
            "matchCriteriaId": "CA035812-F35A-43F1-9A8D-EE02201AA10A"
          },
          {
            "criteria": "cpe:2.3:a:microsoft:office_word_viewer:-:*:*:*:*:*:*:*",
            "vulnerable": true,
            "matchCriteriaId": "C64B2636-8F96-48BA-921F-A8FA0E62DE63"
          }
        ],
        "operator": "OR"
      }
    ]
  },
  {
    "nodes": [
      {
        "negate": false,
        "cpeMatch": [
          {
            "criteria": "cpe:2.3:a:microsoft:internet_explorer:9:*:*:*:*:*:*:*",
            "vulnerable": true,
            "matchCriteriaId": "C043EDDD-41BF-4718-BDCF-158BBBDB6360"
          }
        ],
        "operator": "OR"
      },
      {
        "negate": false,
        "cpeMatch": [
          {
            "criteria": "cpe:2.3:o:microsoft:windows_server_2008:-:sp2:*:*:*:*:*:*",
            "vulnerable": false,
            "matchCriteriaId": "5F422A8C-2C4E-42C8-B420-E0728037E15C"
          }
        ],
        "operator": "OR"
      }
    ],
    "operator": "AND"
  },
  {
    "nodes": [
      {
        "negate": false,
        "cpeMatch": [
          {
            "criteria": "cpe:2.3:a:microsoft:internet_explorer:10:*:*:*:*:*:*:*",
            "vulnerable": true,
            "matchCriteriaId": "D5808661-A082-4CBE-808C-B253972487B4"
          }
        ],
        "operator": "OR"
      },
      {
        "negate": false,
        "cpeMatch": [
          {
            "criteria": "cpe:2.3:o:microsoft:windows_server_2012:-:*:*:*:*:*:*:*",
            "vulnerable": false,
            "matchCriteriaId": "A7DF96F8-BA6A-4780-9CA3-F719B3F81074"
          }
        ],
        "operator": "OR"
      }
    ],
    "operator": "AND"
  }
]

References

Sources include official advisories and independent security research.

Overview

Risk scores

CVSS 3.1

CVSS 2.0

Known exploits

Weaknesses

Social media

Configurations

References