Microsoft Outlook远程代码执行漏洞(CVE-2024-21413)

详细信息

漏洞类型

其他

漏洞描述

Microsoft Outlook可能允许经过身份验证的远程攻击者在系统上执行任意代码，这是由于预览窗格功能未正确中和用户提供的输入所致。攻击者可以利用此漏洞绕过受保护的视图协议，获取本地NTLM凭据，并在系统上以提升的权限执行任意代码。

修复建议

使用Microsoft自动更新为您的系统应用相应的修补程序，或使用Microsoft安全更新指南搜索可用的修补程序。参考链接： https://msrc.microsoft.com/update-guide/vulnerability/CVE-2024-21413

参考链接

• https://msrc.microsoft.com/update-guide/vulnerability/CVE-2024-21413

  CVE · vendor-advisory

• https://research.checkpoint.com/2024/the-risks-of-the-monikerlink-bug-in-microsoft-outlook-and-the-big-picture/

  NVD · Technical Description · Third Party Advisory

• https://nvd.nist.gov/vuln/detail/CVE-2024-21413
• https://research.checkpoint.com/2024/the-risks-of-the-monikerlink-bug-in-microsoft-outlook-and-the-big-picture

  CVE · Technical Description · Third Party Advisory

• https://github.com/advisories/GHSA-9mp4-h7q5-2rgq
• https://www.vicarius.io/vsociety/posts/cve-2024-21413-critical-monikerlink-vulnerability-affecting-microsoft-outlook-detection-script

  NVD · Exploit

• https://www.vicarius.io/vsociety/posts/cve-2024-21413-critical-monikerlink-vulnerability-affecting-microsoft-outlook-mitigation-script

  NVD · Mitigation

• https://www.cisa.gov/known-exploited-vulnerabilities-catalog?field_cve=CVE-2024-21413

  NVD · US Government Resource