A Vulnerability in Microsoft MSHTML Could Allow for Remote Code Execution
by CIRT Team
DESCRIPTION:
A vulnerability has been discovered in Microsoft MSHTML, which could
allow for remote code execution. MSHTML (also known as Trident) is the
engine used for Internet Explorer. It is also used by Microsoft Office
applications for rendering web based content. Successful exploitation of
this vulnerability could result in remote code execution in the context
of the affected user. Depending on the privileges associated with the
user, an attacker could view, change, or delete data.
IMPACT:
A vulnerability has been discovered in Microsoft MSHTML, which could
allow for remote code execution. MSHTML (also known as Trident) is the
engine used for Internet Explorer. It is also used by Microsoft Office
applications for rendering web based content. Exploitation requires an
attacker to craft a malicious Microsoft Office document that hosts the
browser rendering engine, and entice a user to open it. Successful
exploitation of this vulnerability could result in remote code execution
in the context of the affected user. Depending on the privileges
associated with the user, an attacker could view, change, or delete data.
SYSTEM AFFECTED:
* Windows Server 2012
* Windows Server 2012 R2
* Windows Server 2008
* Windows Server 2008 R2
* Windows RT 8.1
* Windows 8.1
* Windows Server 2016
* Windows 10
* Windows Server, version 2004
* Windows Server 2022
* Windows Server 2019
RECOMMENDATIONS:
We recommend the following actions be taken:
* Apply appropriate patches provided by Microsoft to vulnerable systems
immediately after appropriate testing.
* If patching is not possible, apply the appropriate work arounds as
provided in the reference below.
* Run all software as a nonprivileged user (one without administrative
privileges) to diminish the effects of a successful attack.
* Evaluate read, write, and execute permissions on all newly installed
software.
* Apply the Principle of Least Privilege to all systems and services.
REFERENCES:
https://msrc.microsoft.com/update-guide/vulnerability/CVE-2021-40444
https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2021-40444
Recommended Posts
Active Exploitation of Critical F5 BIG – IP Vulnerability (CVE–2023-46747) Uncovered in Bangladesh
06 Nov 2024 - Security Advisories & Alerts
Subscribe here
MEMBER OF:
