CVE-2019-1109
CVE.org · Published
- Record status
- Published
- Identifier year (not publication year)
- 2019
- Source publication
- Source updated
- Imported by cveboard
- Source snapshot
- cve_2026-10-24_midnight_baseline ·
CNA source text (English)
A spoofing vulnerability exists when Microsoft Office Javascript does not check the validity of the web page making a request to Office documents.An attacker who successfully exploited this vulnerability could read or write information in Office documents.The security update addresses the vulnerability by correcting the way that Microsoft Office Javascript verifies trusted web pages., aka 'Microsoft Office Spoofing Vulnerability'.
Scoped product and version facts
Fix information unknown; no fixed version is derived here. Missing information does not prove that no fix exists.
Exploitation unknown; this catalogue does not assess exploitation.
Microsoft Office
- Vendor
- Microsoft
- Product
- Microsoft Office
- Platforms
- Unknown
- Default status
Unknown
| Version (version) | Status (status) | Version scheme (versionType) | Exclusive end (lessThan) | Inclusive end (lessThanOrEqual) | Status changes (at → status) |
|---|---|---|---|---|---|
| 2013 Service Pack 1 (32-bit editions) | affected | Unavailable | Unavailable | Unavailable | None listed |
| 2013 Service Pack 1 (64-bit editions) | affected | Unavailable | Unavailable | Unavailable | None listed |
| 2013 RT Service Pack 1 | affected | Unavailable | Unavailable | Unavailable | None listed |
| 2016 (32-bit edition) | affected | Unavailable | Unavailable | Unavailable | None listed |
| 2016 (64-bit edition) | affected | Unavailable | Unavailable | Unavailable | None listed |
| 2019 for 32-bit editions | affected | Unavailable | Unavailable | Unavailable | None listed |
| 2019 for 64-bit editions | affected | Unavailable | Unavailable | Unavailable | None listed |
Office 365 ProPlus
- Vendor
- Microsoft
- Product
- Office 365 ProPlus
- Platforms
- Unknown
- Default status
Unknown
| Version (version) | Status (status) | Version scheme (versionType) | Exclusive end (lessThan) | Inclusive end (lessThanOrEqual) | Status changes (at → status) |
|---|---|---|---|---|---|
| 32-bit Systems | affected | Unavailable | Unavailable | Unavailable | None listed |
| 64-bit Systems | affected | Unavailable | Unavailable | Unavailable | None listed |