ZDI-23-1638: Microsoft Office Word FBX File Parsing Memory Corruption Remote Code Execution Vulnerability
This vulnerability allows remote attackers to execute arbitrary code on affected installations of Microsoft Office Word. User interaction is required to exploit this vulnerability in that the target must visit a malicious page or open a malicious file. The ZDI has assigned a CVSS rating of 7.8. The following CVEs are assigned: CVE-2023-36045.
Affected Software
Event History
Frequently Asked Questions
What is the severity of ZDI-23-1638?
The vulnerability ZDI-23-1638 has a high severity rating as it allows remote code execution on affected installations of Microsoft Office Word.
How do I fix ZDI-23-1638?
To fix ZDI-23-1638, users should ensure they are running the latest version of Microsoft Office Word with all security updates applied.
Who is affected by ZDI-23-1638?
Users of Microsoft Office Word are affected by vulnerability ZDI-23-1638 if they interact with a malicious page or file.
What type of attacks can exploit ZDI-23-1638?
ZDI-23-1638 can be exploited through social engineering techniques that require user interaction to execute arbitrary code.
What are the implications of ZDI-23-1638?
The implications of ZDI-23-1638 include potential unauthorized access and control of the affected system, leading to data breaches or further attacks.