{"id":17855,"date":"2020-12-16T12:28:29","date_gmt":"2020-12-16T11:28:29","guid":{"rendered":"http:\/\/159.69.82.204\/win\/?p=17855"},"modified":"2020-12-16T12:29:47","modified_gmt":"2020-12-16T11:29:47","slug":"microsoft-revisionen-diverser-office-cves-15-dezember-2020","status":"publish","type":"post","link":"https:\/\/borncity.com\/win\/2020\/12\/16\/microsoft-revisionen-diverser-office-cves-15-dezember-2020\/","title":{"rendered":"Microsoft revisions to various Office CVEs (December 15, 2020)"},"content":{"rendered":"

[German<\/a>]Microsoft has published an overview of revisions of various CVEs as of December 15, 2020. I received the whole thing by mail last night, and I'm posting it here for your information.<\/p>\n

<\/p>\n

For reference, the vulnerabilities in question were closed with the Office security updates of December 8, 2020. The update list in question can be found in my blog post Patchday Microsoft Office Updates (December 8, 2020)<\/a>. Microsoft has subsequently revised the following CVEs.  <\/p>\n

CVE-2020-17119: Outlook <\/h2>\n

– CVE-2020-17119 | Microsoft Outlook Information Disclosure Vulnerability<\/a>
– Version 2.0
– Reason for Revision: Microsoft is announcing the availability of the security
   updates for Microsoft Office for Mac. Customers running affected Mac software
   should install the update for their product to be protected from this
   vulnerability. Customers running other Microsoft Office software do not need to take
   any action. See the Release Notes for more information and download links.
– Originally posted: December 8, 2020
– Updated: December 15, 2020
– Aggregate CVE Severity Rating: Important<\/p>\n

CVE-2020-17123: Excel <\/h2>\n

– CVE-2020-17123 | Microsoft Excel Remote Code Execution Vulnerability<\/a>
– Version 2.0
– Reason for Revision: Microsoft is announcing the availability of the security
   updates for Microsoft Office for Mac. Customers running affected Mac software
   should install the update for their product to be protected from this
   vulnerability. Customers running other Microsoft Office software do not need to take
   any action. See the Release Notes for more information and download links.
– Originally posted: December 8, 2020
– Updated: December 15, 2020
– Aggregate CVE Severity Rating: Important<\/p>\n

CVE-2020-17124: PowerPoint <\/h2>\n

– CVE-2020-17124 | Microsoft PowerPoint Remote Code Execution Vulnerability<\/a>
– Version 2.0
– Reason for Revision: Microsoft is announcing the availability of the security
   updates for Microsoft Office for Mac. Customers running affected Mac software
   should install the update for their product to be protected from this
   vulnerability. Customers running other Microsoft Office software do not need to take
   any action. See the Release Notes for more information and download links.
– Originally posted: December 8, 2020
– Updated: December 15, 2020
– Aggregate CVE Severity Rating: Important<\/p>\n

CVE-2020-17126: Excel<\/h2>\n

– CVE-2020-17126 | Microsoft Excel Information Disclosure Vulnerability<\/a>
– Version 2.0
– Reason for Revision: Microsoft is announcing the availability of the security
   updates for Microsoft Office for Mac. Customers running affected Mac software
   should install the update for their product to be protected from this
   vulnerability. Customers running other Microsoft Office software do not need to take
   any action. See the Release Notes for more information and download links.
– Originally posted: December 8, 2020
– Updated: December 15, 2020
– Aggregate CVE Severity Rating: Important<\/p>\n

CVE-2020-17128: Excel<\/h2>\n

– CVE-2020-17128 | Microsoft Excel Remote Code Execution Vulnerability<\/a>
– Version 2.0
– Reason for Revision: Microsoft is announcing the availability of the security
   updates for Microsoft Office for Mac. Customers running affected Mac software
   should install the update for their product to be protected from this
   vulnerability. Customers running other Microsoft Office software do not need to take
   any action. See the Release Notes for more information and download links.
– Originally posted: December 8, 2020
– Updated: December 15, 2020
– Aggregate CVE Severity Rating: Important<\/p>\n","protected":false},"excerpt":{"rendered":"

[German]Microsoft has published an overview of revisions of various CVEs as of December 15, 2020. I received the whole thing by mail last night, and I'm posting it here for your information.<\/p>\n","protected":false},"author":1,"featured_media":0,"comment_status":"open","ping_status":"","sticky":false,"template":"","format":"standard","meta":{"footnotes":""},"categories":[11,580],"tags":[125,69],"class_list":["post-17855","post","type-post","status-publish","format-standard","hentry","category-office","category-security","tag-office","tag-security"],"_links":{"self":[{"href":"https:\/\/borncity.com\/win\/wp-json\/wp\/v2\/posts\/17855","targetHints":{"allow":["GET"]}}],"collection":[{"href":"https:\/\/borncity.com\/win\/wp-json\/wp\/v2\/posts"}],"about":[{"href":"https:\/\/borncity.com\/win\/wp-json\/wp\/v2\/types\/post"}],"author":[{"embeddable":true,"href":"https:\/\/borncity.com\/win\/wp-json\/wp\/v2\/users\/1"}],"replies":[{"embeddable":true,"href":"https:\/\/borncity.com\/win\/wp-json\/wp\/v2\/comments?post=17855"}],"version-history":[{"count":0,"href":"https:\/\/borncity.com\/win\/wp-json\/wp\/v2\/posts\/17855\/revisions"}],"wp:attachment":[{"href":"https:\/\/borncity.com\/win\/wp-json\/wp\/v2\/media?parent=17855"}],"wp:term":[{"taxonomy":"category","embeddable":true,"href":"https:\/\/borncity.com\/win\/wp-json\/wp\/v2\/categories?post=17855"},{"taxonomy":"post_tag","embeddable":true,"href":"https:\/\/borncity.com\/win\/wp-json\/wp\/v2\/tags?post=17855"}],"curies":[{"name":"wp","href":"https:\/\/api.w.org\/{rel}","templated":true}]}}