HTTP: Microsoft Office CVE-2019-0560 Information Disclosure

This signature detects attempts to exploit a known vulnerability against Microsoft Office. Successful exploitation could result in disclosure of information which could be used to further compromise the target system.

Extended Description

An information disclosure vulnerability exists when Microsoft Office improperly discloses the contents of its memory, aka "Microsoft Office Information Disclosure Vulnerability." This affects Office 365 ProPlus, Microsoft Office.

Affected Products

Microsoft office_365_proplus

Short Name
HTTP:STC:DL:CVE-2019-0560-ID
Severity
Minor
Recommended
True
Recommended Action
Drop
Category
HTTP
Keywords
CVE-2019-0560 Disclosure Information Microsoft Office bid:106398
Release Date
02/25/2019
Supported Platforms

srx-branch-12.3

srx-19.3

srx-branch-19.3

vsrx3bsd-19.2

srx-branch-19.4

vsrx-19.4

mx-12.3

mx-19.4

vmx-19.4

mx-19.3

vsrx3bsd-19.4

srx-19.4

vsrx-12.3

vmx-19.3

vsrx-19.2

srx-12.3

Sigpack Version
3590
False Positive
Unknown
Vendors

Microsoft

CVSS Score

4.3

Found a potential security threat?