NetSight
high7.8

CVE-2020-1410

A remote code execution vulnerability exists when Windows Address Book (WAB) improperly processes vcard files.To exploit the vulnerability, an attacker could s…

Impact

A remote code execution vulnerability exists when Windows Address Book (WAB) improperly processes vcard files.To exploit the vulnerability, an attacker could send a malicious vcard that a victim opens using Windows Address Book (WAB), aka 'Windows Address Book Remote Code Execution Vulnerability'.

Affected products

VendorProductAffected versions
MicrosoftWindows 10
All versions
Versions 1607, 1709, 1803, 1809, 1903
MicrosoftWindows 7
All versions
MicrosoftWindows 8.1
All versions
MicrosoftWindows Rt 8.1
All versions
MicrosoftWindows Server 2008
All versions
MicrosoftWindows Server 2012
All versions
Version r2
MicrosoftWindows Server 2016
All versions
Versions 1903, 1909, 2004
MicrosoftWindows Server 2019
All versions

References