SB2020021134 - Security feature bypass in Microsoft Outlook
Published: February 11, 2020
Security Bulletin ID
SB2020021134
Severity
Low
Patch available
YES
Number of vulnerabilities
1
Exploitation vector
Remote access
Highest impact
Data manipulation
Breakdown by Severity
- Low
- Medium
- High
- Critical
Description
This security bulletin contains information about 1 security vulnerability.
1) Security Features (CVE-ID: CVE-2020-0696)
This vulnerability allows a local attacker to bypass security rescritions feature.
The vulnerability exists due to the Microsoft Outlook software improperly handles the parsing of URI formats. A remote attacker can trick a victim to open a specially crafted URI and execute target application.
The security feature bypass by itself does not allow arbitrary code execution. However, to successfully exploit the vulnerability, an attacker would have to use it in conjunction with another vulnerability, such as a remote code execution vulnerability.
Remediation
Install update from vendor's website.