PT-2023-5126 · Microsoft · Windows 11+1

Carrot_C4K3 + 4 · Publicado 2023-09-12 · Atualizado 2025-01-18 · CVE-2023-38146

Positive Technologies (AI Summary)

CVSS v2.0

10

Alta

Vetor base

AV:N/AC:L/Au:N/C:C/I:C/A:C

Name of the Vulnerable Software and Affected Versions Windows 11 (affected versions not specified)

Description The vulnerability is related to insufficient input validation in the Windows Themes component, allowing remote attackers to execute arbitrary code on the system. This can occur when a user opens a malicious .THEME file. The issue has been exploited in real-world incidents, with proof-of-concept exploit code published. A successful exploit could grant attackers complete control over the victim's system, allowing them to install malware, steal sensitive data, or launch further attacks within the network.

Recommendations To resolve the issue, install Microsoft's September 2023 security updates as soon as possible to protect your system from attacks. The updates are available through Windows Update and the Microsoft Update Catalog. As a temporary workaround, consider avoiding the use of .THEME files from untrusted sources until the issue is resolved.

Exploit

Correção

RCE

DoS

Time Of Check To Time Of Use

Enumeração de Fraquezas

CWE-367

CWE-20

Identificadores relacionados

BDU:2023-05717

CVE-2023-38146

Produtos afetados

Windows

Windows 11

Referências · 62

• 🔥 https://github.com/rapid7/metasploit-framework/blob/master/modules/exploits/windows/fileformat/theme_dll_hijack_cve_2023_38146.rb · Exploit
• 🔥 https://github.com/gabe-k/themebleed · Exploit
• 🔥 https://github.com/exploits-forsale/themebleed · Exploit
• 🔥 https://github.com/Jnnshschl/CVE-2023-38146 · Exploit
• https://twitter.com/Dinosn/status/1702025012876546223 · Publicação no Twitter
• https://msrc.microsoft.com/update-guide/en-US/advisory/CVE-2023-38146 · Aviso do Fabricante
• https://twitter.com/fletch_ai/status/1702504256673112526 · Publicação no Twitter
• https://t.me/secharvester/14397 · Publicação no Telegram
• https://twitter.com/nuria_imeq/status/1703141377373028783 · Publicação no Twitter
• https://twitter.com/vulncure/status/1732049563899265128 · Publicação no Twitter
• https://twitter.com/vulncure/status/1732049554504052876 · Publicação no Twitter
• https://nvd.nist.gov/vuln/detail/CVE-2023-38146 · Nota de Segurança
• https://t.me/avleonovcom/1141 · Publicação no Telegram
• https://msrc.microsoft.com/update-guide/vulnerability/CVE-2023-38146 · Aviso do Fabricante
• https://twitter.com/__mkay4/status/1703160011029880947 · Publicação no Twitter