Security Updates for Microsoft Office Products (February 2020) (deprecated)

high Nessus Plugin ID 133716

Synopsis

This plugin has been deprecated.

Description

This plugin has been deprecated to be brought in line with Tenable's C2R plugin policy. Pleas use smb_nt_ms22_mar_visio_c2r.nasl instead.

Solution

Microsoft has released a security update to address this issue.

For Office 365, Office 2016 C2R, or Office 2019, ensure automatic updates are enabled or open any office app and manually perform an update.

See Also

http://www.nessus.org/u?3c75b3fb

http://www.nessus.org/u?097c5011

http://www.nessus.org/u?002d43eb

Plugin Details

Severity: High

ID: 133716

File Name: smb_nt_ms20_feb_office.nasl

Version: 1.3

Type: local

Agent: windows

Published: 2/14/2020

Updated: 6/10/2022

Supported Sensors: Nessus Agent, Nessus

Risk Information

VPR

Risk Factor: Medium

Score: 6.7

CVSS v2

Risk Factor: High

Base Score: 9.3

Temporal Score: 6.9

Vector: CVSS2#AV:N/AC:M/Au:N/C:C/I:C/A:C

CVSS Score Source: CVE-2020-0759

CVSS v3

Risk Factor: High

Base Score: 8.8

Temporal Score: 7.7

Vector: CVSS:3.0/AV:N/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H

Temporal Vector: CVSS:3.0/E:U/RL:O/RC:C

Vulnerability Information

CPE: cpe:/a:microsoft:office

Required KB Items: SMB/MS_Bulletin_Checks/Possible

Exploit Ease: No known exploits are available

Patch Publication Date: 2/11/2020

Vulnerability Publication Date: 2/11/2020

Reference Information

CVE: CVE-2020-0696, CVE-2020-0697, CVE-2020-0759