CVE:CVE-2019-0561
CNNVD:CNNVD-201901-159
Microsoft Word是美国微软（Microsoft）公司Office套件中的一款文字处理软件。
Microsoft Word中存在信息泄露漏洞，该漏洞源于程序未正确使用Microsoft Word宏按钮。攻击者可利用该漏洞从目标系统中读取任意文件。以下产品和版本受到影响：Microsoft Office 2010 SP2，Office 2016 for Mac，Office 2019，Office 2019 for Mac，Office Web Apps Server 2010 SP2；Word 2010 SP2，Word 2013 RT SP1，Word 2013 SP1，Word 2016；Office 365 ProPlus；Word Automation Services。
solution:Upgrade microsoft office to a higher version than 2010:sp2,2016,2019,and avoid the version 2010:sp2,2016,2019; Upgrade microsoft office_365_proplus to a higher version than -; Upgrade microsoft office_web_apps_server to a higher version than 2010:sp2,and avoid the version 2010:sp2; Upgrade microsoft sharepoint_server to a higher version than 2010:sp2,and avoid the version 2010:sp2; Upgrade microsoft word to a higher version than 2010:sp2,2013:sp1,2016,and avoid the version 2010:sp2,2013:sp1,2016; Upgrade microsoft word_automation_services to a higher version than -