Title

Microsoft OneNote Remote Code Execution Vulnerability (Cat II impact)

Discussion

Microsoft has released a security bulletin addressing a remote code execution vulnerability in the Microsoft OneNote. To exploit this vulnerability, an attacker would entice a user to open a specially crafted file with an affected version of Microsoft OneNote hosted on a web site or sent via email. If successfully exploited, this vulnerability would allow an attacker to execute arbitrary code in the context of the current user and compromise the affected systems.

Check Content

Fix Text

Additional Identifiers

Rule ID:

Vulnerability ID: V-53821

Group Title:

Expert Comments

CCIs tied to check.

Controls tied to check. These are derived from the CCIs shown above.