CVE-2020-1563: 
vulnerability analysis and mitigation

A remote code execution vulnerability (CVE-2020-1563) exists in Microsoft Office software when the software fails to properly handle objects in memory. The vulnerability was disclosed and patched as part of Microsoft's August 2020 security updates. The affected systems include Microsoft Office 2010, Office 2013, Office 2016, Office 2019, and Microsoft 365 Apps (NVD).

The vulnerability has been assigned a CVSS v3.1 base score of 7.8 (HIGH) with the vector string CVSS:3.1/AV:L/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H. Under CVSS v2.0, it received a base score of 9.3 (HIGH) with vector (AV:N/AC:M/Au:N/C:C/I:C/A:C). The vulnerability requires user interaction, specifically opening a specially crafted file with an affected version of Microsoft Office (NVD).

If successfully exploited, an attacker could run arbitrary code in the context of the current user. For users with administrative rights, an attacker could take complete control of the affected system, allowing them to install programs, view, change, or delete data, and create new accounts with full user rights. Users with fewer privileges on the system would be less impacted than those with administrative rights (NVD).

The vulnerability requires user interaction for successful exploitation. In an email attack scenario, an attacker would need to send a specially crafted file to the user and convince them to open it. The attack requires the victim to voluntarily interact with the malicious content (NVD).

Microsoft addressed this vulnerability by releasing security updates that correct how Microsoft Office handles objects in memory. The fix was included in the August 2020 security updates. Users are advised to apply the security update KB4484379 for Office 2010, and corresponding updates for other affected versions (Microsoft Support).