HTTP: Microsoft Office Word CVE-2019-0540 Security Feature Bypass

This signature detects attempts to exploit a known vulnerability against Word component of Microsoft Office. Successful exploitation could result in disclosure of information which could be used to further compromise the target system.

Extended Description

A security feature bypass vulnerability exists when Microsoft Office does not validate URLs.An attacker could send a victim a specially crafted file, which could trick the victim into entering credentials, aka 'Microsoft Office Security Feature Bypass Vulnerability'.

Affected Products

Microsoft office_365_proplus

References

BugTraq: 106863

CVE: CVE-2019-0540

Short Name

HTTP:STC:CVE-2019-0540-SEC-BYPA

Severity

Minor

Recommended

True

Recommended Action

Drop

HTTP: Microsoft Office Word CVE-2019-0540 Security Feature Bypass

Extended Description

Affected Products

References

Found a potential security threat?