Vulnerabilities

A remote code execution vulnerability exists in Microsoft Word software when it fails to properly handle objects in memory. An attacker who successfully exploited the vulnerability could use a specially crafted file to perform actions in the security context of the current user. The file could then take actions on behalf of the logged-on user with the same permissions as the current user.<br /> To exploit the vulnerability, a user must open a specially crafted file with an affected version of Microsoft Word software.<br /> Two possible email attack scenarios exist for this vulnerability:<br /> <br /> With the first email attack scenario, an attacker could send a specially crafted email message to the user and wait for the user to click on the message. When the message renders via Microsoft Word in the Outlook Preview Pane, an attack could be triggered.<br /> With the second scenario, an attacker could attach a specially crafted file to an email, send it to a user, and convince them to open it.<br /> <br /> In a web-based attack scenario, an attacker could host a website (or leverage a compromised website that accepts or hosts user-provided content) that contains a specially crafted file that is designed to exploit the vulnerability. However, an attacker would have no way to force the user to visit the website. Instead, an attacker would have to convince the user to click a link, typically by way of an enticement in an email or other message, and then convince the user to open the specially crafted file.<br /> The security update addresses the vulnerability by correcting how Microsoft Word handles files in memory.<br /> For users who view their emails in Outlook, the Preview Pane attack vector can be mitigated by disabling this feature. The following registry keys can be set to disable the Preview Pane in Outlook on Windows, either via manual editing of the registry or by modifying Group Policy.<br /> Note Using Registry Editor incorrectly can cause serious problems that may require you to reinstall your operating system. Microsoft cannot guarantee that problems resulting from the incorrect use of Registry Editor can be solved. Use Registry Editor at your own risk. For information about how to edit the registry, view the &amp;quot;Changing Keys and Values&amp;quot; Help topic in Registry Editor (Regedit.exe) or view the &amp;quot;Add and Delete Information in the Registry&amp;quot; and &amp;quot;Edit Registry Data&amp;quot; Help topics in Regedt32.exe.<br /> Outlook 2010:<br /> <br /> HKEY_CURRENT_USER\Software\Microsoft\Office\14.0\Outlook\Options<br /> DWORD: DisableReadingPane<br /> Value: 1<br /> <br /> Outlook 2013:<br /> <br /> HKEY_CURRENT_USER\Software\Microsoft\Office\15.0\Outlook\Options<br /> DWORD: DisableReadingPane<br /> Value: 1<br /> <br /> Outlook 2016, Outlook 2019, and Office 365 ProPlus:<br /> <br /> HKEY_CURRENT_USER\Software\Microsoft\Office\16.0\Outlook\Options<br /> DWORD: DisableReadingPane<br /> Value: 1<br /> <br />

A memory corruption vulnerability exists in the Windows Server DHCP service when an attacker sends specially crafted packets to a DHCP failover server. An attacker who successfully exploited the vulnerability could cause the DHCP service to become nonresponsive.<br /> To exploit the vulnerability, an attacker could send a specially crafted packet to a DHCP server. However, the DHCP server must be set to failover mode for the attack to succeed.<br /> The security update addresses the vulnerability by correcting how DHCP failover servers handle network packets.<br />

An elevation of privilege vulnerability exists in Git for Visual Studio when it improperly parses configuration files. An attacker who successfully exploited the vulnerability could execute code in the context of another local user.<br /> To exploit the vulnerability, an authenticated attacker would need to modify Git configuration files on a system prior to a full installation of the application. The attacker would then need to convince another user on the system to execute specific Git commands.<br /> The update addresses the issue by changing the permissions required to edit configuration files.<br />

A memory corruption vulnerability exists in the Windows Server DHCP service when processing specially crafted packets. An attacker who successfully exploited the vulnerability could cause the DHCP server service to stop responding.<br /> To exploit the vulnerability, a remote unauthenticated attacker could send a specially crafted packet to an affected DHCP server.<br /> The security update addresses the vulnerability by correcting how DHCP servers handle network packets.<br />

A memory corruption vulnerability exists in the Windows Server DHCP service when an attacker sends specially crafted packets to a DHCP server. An attacker who successfully exploited the vulnerability could run arbitrary code on the DHCP server.<br /> To exploit the vulnerability, an attacker could send a specially crafted packet to a DHCP server.<br /> The security update addresses the vulnerability by correcting how DHCP servers handle network packets.<br />

A spoofing vulnerability exists in the way Microsoft Outlook iOS software parses specifically crafted email messages. An authenticated attacker could exploit the vulnerability by sending a specially crafted email message to a victim.<br /> The attacker who successfully exploited this vulnerability could then perform cross-site scripting attacks on the affected systems and run scripts in the security context of the current user.<br /> The security update addresses the vulnerability by correcting how Outlook iOS parses specially crafted email messages.<br />

A remote code execution vulnerability exists in Remote Desktop Services – formerly known as Terminal Services – when an unauthenticated attacker connects to the target system using RDP and sends specially crafted requests. This vulnerability is pre-authentication and requires no user interaction. An attacker who successfully exploited this vulnerability could execute arbitrary code on the target system. An attacker could then install programs; view, change, or delete data; or create new accounts with full user rights.<br /> To exploit this vulnerability, an attacker would need to send a specially crafted request to the target systems Remote Desktop Service via RDP.<br /> The update addresses the vulnerability by correcting how Remote Desktop Services handles connection requests.<br />

A denial of service vulnerability exists in Remote Desktop Protocol (RDP) when an attacker connects to the target system using RDP and sends specially crafted requests. An attacker who successfully exploited this vulnerability could cause the RDP service on the target system to stop responding.<br /> To exploit this vulnerability, an attacker would need to run a specially crafted application against a server which provides Remote Desktop Protocol (RDP) services.<br /> The update addresses the vulnerability by correcting how RDP handles connection requests.<br />

A remote code execution vulnerability exists in Remote Desktop Services – formerly known as Terminal Services – when an unauthenticated attacker connects to the target system using RDP and sends specially crafted requests. This vulnerability is pre-authentication and requires no user interaction. An attacker who successfully exploited this vulnerability could execute arbitrary code on the target system. An attacker could then install programs; view, change, or delete data; or create new accounts with full user rights.<br /> To exploit this vulnerability, an attacker would need to send a specially crafted request to the target systems Remote Desktop Service via RDP.<br /> The update addresses the vulnerability by correcting how Remote Desktop Services handles connection requests.<br />

A denial of service vulnerability exists when the XmlLite runtime (XmlLite.dll) improperly parses XML input. An attacker who successfully exploited this vulnerability could cause a denial of service against an XML application.<br /> A remote unauthenticated attacker could exploit this vulnerability by issuing specially crafted requests to an XML application.<br /> The update addresses the vulnerability by correcting how the XmlLite runtime parses XML input.<br />

An elevation of privilege vulnerability exists due to a stack corruption in Windows Subsystem for Linux. An attacker who successfully exploited the vulnerability could execute code with elevated permissions.<br /> To exploit the vulnerability, a locally authenticated attacker could run a specially crafted application.<br /> The security update addresses the vulnerability by correcting how Windows Subsystem for Linux handles objects in memory.<br />

An elevation of privilege vulnerability exists in the way that the wcmsvc.dll handles objects in memory. An attacker who successfully exploited the vulnerability could execute code with elevated permissions.<br /> To exploit the vulnerability, a locally authenticated attacker could run a specially crafted application.<br /> The security update addresses the vulnerability by ensuring the wcmsvc.dll properly handles objects in memory.<br />