Ted teamer Kuba Gretzky also published an in-depth analysis of the bug it's a good idea to patch ASAP.
Vulnerability guru Will Dormann has been tweeting about this type of flaw since July, and today went into more detail about this particular vulnerability and how it could be abused. Indeed, exploiting CVE-2022-41091 involves tricking a victim into opening "a malicious file that would evade Mark of the Web defenses, resulting in a limited loss of integrity and availability of security features such as Protected View in Microsoft Office, which rely on MotW tagging," Redmond explained.
MotW is supposed to identify a file as being sourced from the internet, so when a user opens it, extra security defenses trigger, such as a warning to the user.īut there are ways around it, allowing malicious stuff that should be caught by Microsoft's defenses to carry on as if it's all above board.
0 kommentar(er)
