CVE-2023-29344 - OpenCVE

Microsoft Office Remote Code Execution Vulnerability

No CVSS v4.0

Attack Vector Local

Attack Complexity Low

Privileges Required None

Scope Unchanged

Confidentiality Impact High

Integrity Impact High

Availability Impact High

User Interaction Required

No CVSS v3.0

No CVSS v2

This CVE is not in the KEV list.

Key SSVC decision points have not yet been added.

Vendors	Products
Microsoft	365 Apps Office Office Long Term Servicing Channel

Configuration 1 [-]

OR	cpe:2.3:a:microsoft:365_apps:-::::enterprise:::
	cpe:2.3:a:microsoft:office:2019:::::macos::
	cpe:2.3:a:microsoft:office_long_term_servicing_channel:2021:::::macos::

No data.

References

Link	Providers
https://msrc.microsoft.com/update-guide/vulnerability/CVE-2023-29344

History

No history.

MITRE

Status: PUBLISHED

Assigner: microsoft

Published: 2023-06-05T18:26:41.716Z

Updated: 2024-08-02T14:07:46.242Z

Reserved: 2023-04-04T22:34:18.381Z

Link: CVE-2023-29344

Vulnrichment

No data.

NVD

Status : Modified

Published: 2023-06-05T19:15:10.190

Modified: 2024-05-29T02:15:40.180

Link: CVE-2023-29344

Redhat

No data.

{"dataType": "CVE_RECORD", "dataVersion": "5.1", "cveMetadata": {"cveId": "CVE-2023-29344", "assignerOrgId": "f38d906d-7342-40ea-92c1-6c4a2c6478c8", "state": "PUBLISHED", "assignerShortName": "microsoft", "dateReserved": "2023-04-04T22:34:18.381Z", "datePublished": "2023-06-05T18:26:41.716Z", "dateUpdated": "2024-08-02T14:07:46.242Z"}, "containers": {"cna": {"title": "Microsoft Office Remote Code Execution Vulnerability", "datePublic": "2023-05-09T07:00:00+00:00", "affected": [{"vendor": "Microsoft", "product": "Microsoft Office 2019 for Mac", "cpes": ["cpe:2.3:a:microsoft:office:2019:*:*:*:*:macos:*:*"], "platforms": ["Unknown"], "versions": [{"version": "16.0.0", "lessThan": "16.73.23051401", "versionType": "custom", "status": "affected"}]}, {"vendor": "Microsoft", "product": "Microsoft 365 Apps for Enterprise", "cpes": ["cpe:2.3:a:microsoft:365_apps:-:*:*:*:enterprise:*:*:*"], "platforms": ["32-bit Systems", "x64-based Systems"], "versions": [{"version": "16.0.1", "lessThan": "https://aka.ms/OfficeSecurityReleases", "versionType": "custom", "status": "affected"}]}, {"vendor": "Microsoft", "product": "Microsoft Office LTSC for Mac 2021", "cpes": ["cpe:2.3:a:microsoft:office_long_term_servicing_channel:2021:*:*:*:*:macos:*:*"], "platforms": ["Unknown"], "versions": [{"version": "16.0.1", "lessThan": "16.73.23051401", "versionType": "custom", "status": "affected"}]}], "descriptions": [{"value": "Microsoft Office Remote Code Execution Vulnerability", "lang": "en-US"}], "problemTypes": [{"descriptions": [{"description": "CWE-122: Heap-based Buffer Overflow", "lang": "en-US", "type": "CWE", "cweId": "CWE-122"}]}], "providerMetadata": {"orgId": "f38d906d-7342-40ea-92c1-6c4a2c6478c8", "shortName": "microsoft", "dateUpdated": "2024-05-29T01:50:57.534Z"}, "references": [{"name": "Microsoft Office Remote Code Execution Vulnerability", "tags": ["vendor-advisory"], "url": "https://msrc.microsoft.com/update-guide/vulnerability/CVE-2023-29344"}], "metrics": [{"format": "CVSS", "scenarios": [{"lang": "en-US", "value": "GENERAL"}], "cvssV3_1": {"version": "3.1", "baseSeverity": "HIGH", "baseScore": 7.8, "vectorString": "CVSS:3.1/AV:L/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C"}}]}, "adp": [{"providerMetadata": {"orgId": "af854a3a-2127-422b-91ae-364da2661108", "shortName": "CVE", "dateUpdated": "2024-08-02T14:07:46.242Z"}, "title": "CVE Program Container", "references": [{"name": "Microsoft Office Remote Code Execution Vulnerability", "tags": ["vendor-advisory", "x_transferred"], "url": "https://msrc.microsoft.com/update-guide/vulnerability/CVE-2023-29344"}]}]}}