CVE-2019-1200 is a high-severity remote code execution vulnerability affecting Microsoft Outlook software. When Outlook fails to handle objects in memory properly, it allows attackers to execute malicious code on the affected systems. Microsoft has released a security update to address this issue by correcting how Outlook handles files in memory. The vulnerability affects various Microsoft Outlook products, but the Preview Pane is not an attack vector for this vulnerability.

How do I know if I'm affected?

To determine if you're affected by the vulnerability, check if you're using any of the following Microsoft Outlook versions: Outlook 2013 RT Service Pack 1, Outlook 2010 Service Pack 2 (64-bit and 32-bit editions), Outlook 2013 Service Pack 1 (64-bit and 32-bit editions), Outlook 2016 (64-bit and 32-bit editions), Office 365 ProPlus (64-bit and 32-bit Systems), and Microsoft Office 2019 (64-bit and 32-bit editions). If you're using any of these versions, your system may be vulnerable to this remote code execution issue.

What should I do if I'm affected?

If you're affected by the vulnerability, it's important to install the relevant security updates for your specific version of Microsoft Outlook. To do this, simply open Outlook, click on "File," then "Office Account," and finally "Update Options." Choose "Update Now" to install the latest security updates, protecting your system from this vulnerability.

Is this in CISA’s Known Exploited Vulnerabilities Catalog?

The CVE-2019-1200 vulnerability is not listed in CISA's Known Exploited Vulnerabilities Catalog. This high-severity issue affects Microsoft Outlook and occurs when the software fails to handle objects in memory properly, allowing remote code execution. Although the vulnerability has not been publicly disclosed or exploited, it's important to install the relevant security updates to protect your system.

Weakness enumeration

The weakness enumeration for this vulnerability is categorized as Insufficient Information or NVD-CWE-noinfo.

For more details

CVE-2019-1200 is a critical remote code execution vulnerability in Microsoft Outlook. After analyzing various sources, it's clear that installing the relevant security updates is crucial to protect your system. For a comprehensive understanding of the vulnerability, including its description, severity, technical details, and affected software configurations, refer to the NVD page or the links below.

• NVD - CVE-2019-1200

• CVE-2019-1200 - Security Update Guide - Microsoft