Vulnerability · NVD

CVE-2019-1084

CVE-2019-1084, medium severity (CVSS 6.5): 5 tracked apps concerned, all fixed or indeterminable on their current version.

Severity (CVSS): 6.5
Exploitation: 5.3 %
Tracked apps: 5
Still exposed: 0

Published on 2019-07-15

An information disclosure vulnerability exists when Exchange allows creation of entities with Display Names having non-printable characters. An authenticated attacker could exploit this vulnerability by creating entities with invalid display names, which, when added to conversations, remain invisible. This security update addresses the issue by validating display names upon creation in Microsoft Exchange, and by rendering invalid display names correctly in Microsoft Outlook clients., aka 'Microsoft Exchange Information Disclosure Vulnerability'.

Attack vector : Network No user interaction

Show raw CVSS vector

CVSS:3.0/AV:N/AC:L/PR:L/UI:N/S:U/C:H/I:N/A:N

EPSS 5.33% above median percentile 92.3%

Tracked apps referencing this CVE

For each app: the affected range, the fixing version, and where the tracked app stands today.

Microsoft Office macOS brew:cask:microsoft-office

Affected - Fixed in - Latest tracked 16.113.26092012 undetermined
Microsoft Outlook iOS com.microsoft.Office.Outlook

Affected - Fixed in - Latest tracked 5.2637.1 undetermined
Microsoft Outlook Android com.microsoft.office.outlook

Affected - Fixed in - Latest tracked 5.2635.3 undetermined
Microsoft Outlook macOS com.microsoft.Outlook

Affected - Fixed in - Latest tracked 16.113.26091740 undetermined
Office Windows winget:Microsoft.Office

Affected - Fixed in - Latest tracked - undetermined

NVD references 9 distinct products for this CVE : only those tracked by Scout (mobile and desktop catalog apps) are listed above. Libraries, servers and out-of-scope products do not appear here. Full list on NVD ↗

Vulnerable CPE configurations (15)

Vendor	Product	Platform	Versions	CPE 2.3 URI
microsoft	office All platforms (wildcard)	All platforms (wildcard)	-	cpe:2.3:a:microsoft:office:2010:sp2::::::
microsoft	office All platforms (wildcard)	All platforms (wildcard)	-	cpe:2.3:a:microsoft:office:2010:sp2::::::
microsoft	office All platforms (wildcard)	All platforms (wildcard)	-	cpe:2.3:a:microsoft:office:2013:sp1::::::
microsoft	office All platforms (wildcard)	All platforms (wildcard)	-	cpe:2.3:a:microsoft:office:2013:sp1::::::
microsoft	office All platforms (wildcard)	All platforms (wildcard)	-	cpe:2.3:a:microsoft:office:2016:::::::*
microsoft	office All platforms (wildcard)	All platforms (wildcard)	-	cpe:2.3:a:microsoft:office:2016:::::::*
microsoft	office All platforms (wildcard)	All platforms (wildcard)	-	cpe:2.3:a:microsoft:office:2019:::::::*
microsoft	office All platforms (wildcard)	All platforms (wildcard)	-	cpe:2.3:a:microsoft:office:2019:::::::*
microsoft	office macOS	macOS	-	cpe:2.3:a:microsoft:office:2019:::::macos::
microsoft	outlook iOS	iOS	-	cpe:2.3:a:microsoft:outlook:-:::::iphone_os::
microsoft	outlook All platforms (wildcard)	All platforms (wildcard)	-	cpe:2.3:a:microsoft:outlook:2013:sp1::::::
microsoft	outlook All platforms (wildcard)	All platforms (wildcard)	-	cpe:2.3:a:microsoft:outlook:2013:sp1::::::
microsoft	outlook All platforms (wildcard)	All platforms (wildcard)	-	cpe:2.3:a:microsoft:outlook:2016:::::::*
microsoft	outlook All platforms (wildcard)	All platforms (wildcard)	-	cpe:2.3:a:microsoft:outlook:2016:::::::*
microsoft	outlook Android	Android	-	cpe:2.3:a:microsoft:outlook:2016:::::android::

View on NVD ↗ Advisory · portal.msrc.microsoft.com

Manage your fleet with Appaloosa

Appaloosa pushes OS updates, apps and policies to your Windows, macOS, iOS and Android devices from one console.

Discover Appaloosa MDM