Microsoft Office Word MSHTML Remote Code Execution

Discussion in 'News Aggregator' started by Packet Storm, 10 Dec 2021.

  1. Packet Storm

    Packet Storm Guest

    This Metasploit module creates a malicious docx file that when opened in Word on a vulnerable Windows system will lead to code execution. This vulnerability exists because an attacker can craft a malicious ActiveX control to be used by a Microsoft Office document that hosts the browser rendering engine.

    Continue reading...
     

Share This Page

Loading...