CVE-2020-0971

Description

References

• portal.msrc.microsoft.com/en-US/security-guidance/advisory/CVE-2020-0971 · Patch
• zerodayinitiative.com/advisories/ZDI-20-1398 · Third Party Advisory

sharepoint enterprise server의 다른 취약점

• CVE-2025-54905높음 7.1Untrusted pointer dereference in Microsoft Office Word allows an unauthorized attacker to disclose information locally.
• CVE-2025-53736보통 6.2Buffer over-read in Microsoft Office Word allows an unauthorized attacker to disclose information locally.
• CVE-2025-53733높음 8.4Incorrect conversion between numeric types in Microsoft Office Word allows an unauthorized attacker to execute code locally.
• CVE-2025-49706보통 6.5EXPLOITED (CISA KEV)Improper authentication in Microsoft Office SharePoint allows an unauthorized attacker to perform spoofing over a network.
• CVE-2025-47994높음 8.6Deserialization of untrusted data in Microsoft Office allows an unauthorized attacker to elevate privileges locally.