Detections
Analytics
CVE-2019-0906
high
Description
A remote code execution vulnerability exists when the Windows Jet Database Engine improperly handles objects in memory. An attacker who successfully exploited this vulnerability could execute arbitrary code on a victim system. An attacker could exploit this vulnerability by enticing a victim to open a specially crafted file. The update addresses the vulnerability by correcting the way the Windows Jet Database Engine handles objects in memory.
References
https://www.tenable.com/blog/tenable-roundup-for-microsofts-june-2019-patch-tuesday
https://www.zerodayinitiative.com/advisories/ZDI-19-624/
https://portal.msrc.microsoft.com/en-US/security-guidance/advisory/CVE-2019-0906
https://msrc.microsoft.com/update-guide/vulnerability/CVE-2019-0906