Security News > 2020 > April > Microsoft Issues Out-Of-Band Security Update For Office, Paint 3D

Microsoft has released an out-of-band security update for Microsoft Office, Office 365 ProPlus and Paint 3D. The applications are affected by multiple Autodesk vulnerabilities that, if exploited, could enable remote code execution.

"Remote code execution vulnerabilities exist in Microsoft products that utilize the FBX library when processing specially crafted 3D content," according to Microsoft's Tuesday advisory.

Affected products include Office 365 ProPlus, which is Microsoft's subscription that comes with premium apps like Word, Excel, PowerPoint, Outlook and Teams; as well as Paint 3D, Microsoft's 3D modeling and printing application.

Microsoft Office 2016 and Microsoft Office 2019 are also impacted.

The security updates addresses these vulnerabilities by correcting the way 3D content is handled by Microsoft software.

News URL

https://threatpost.com/microsoft-issues-out-of-band-security-update-for-office-paint-3d/155016/