Title

Microsoft Office Input Method Editor (IME) Privilege Escalation Vulnerability (Cat II impact)

Discussion

Microsoft has released a security bulletin addressing a vulnerability in Microsoft Office Input Method Editor (IME). To exploit this vulnerability, an attacker would launch Internet Explorer from the toolbar in Microsoft Pinyin IME for Simplified Chinese. If successful exploited, this vulnerability would allow an attacker to execute arbitrary code in kernel mode resulting in the compromise of affected systems.

Check Content

Fix Text

Additional Identifiers

Rule ID:

Vulnerability ID: V-40301

Group Title:

Expert Comments

CCIs tied to check.

Controls tied to check. These are derived from the CCIs shown above.