by @the0z1
23 Jul 2024

MonikerLink critical vulnerability in MS Outlook (CVE-2024-21413)

by @the0z1
23 Jul 2024

MonikerLink critical vulnerability in MS Outlook (CVE-2024-21413)

CVEs

9.8 Critical Severity

Apps

Office
OfficeMicrosoft
16.0.10417.20197.*
16.0.20405.20000.*
16.0.20326.20044.*
16.0.20403.20000.*
16.0.20228.20158.*
16.0.20326.20034.*
16.0.20330.20000.*
16.0.20326.20022.*
16.0.20328.20000.*
16.0.20228.20124.*
2024.*
2021.*
365 Apps
365 AppsMicrosoft
19.2608.36020.0.*
16.0.20405.20000.*
16.0.20326.20044.*
19.2608.35020.0.*
19.2608.34011.0.*
19.2608.33020.0.*
19.2608.34010.0.*
16.0.20403.20000.*
16.0.20228.20158.*
19.2607.61021.0.*

PoC video

Summary

A vulnerability has been discovered in Microsoft Outlook known as "MonikerLink," which allows an attacker to obtain NTLM hashes and execute arbitrary remote code on a victim machine by exploiting some specially crafted hyperlinks within an email to bypass the protected view of Outlook.

Description

@the0z1

2 posts

Total vcoins

0

Comments (0)