PT-2021-6974 · Microsoft · Office Powerpoint+2

Khangkito + 1 · Published 2021-09-14 · Updated 2023-12-28 · CVE-2021-38659

Positive Technologies (AI Summary)

CVSS v3.1

7.8

High

Base vector

AV:L/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H

Name of the Vulnerable Software and Affected Versions Microsoft Office (affected versions not specified) Microsoft 365 Apps for Enterprise (affected versions not specified)

Description The issue is related to incorrect code generation management in Microsoft Office and Microsoft 365 Apps for Enterprise. It allows a remote attacker to execute arbitrary code. The vulnerability is also related to the parsing of Microsoft PowerPoint PPT files, which can lead to a double free remote code execution.

Recommendations For Microsoft Office, update to a version that includes the fix for this issue. For Microsoft 365 Apps for Enterprise, apply the necessary configuration changes to mitigate the risk of exploitation. As a temporary workaround, consider restricting the use of Microsoft PowerPoint until a patch is available. Avoid using potentially vulnerable features in Microsoft Office and Microsoft 365 Apps for Enterprise until the issue is resolved.

Fix

Code Injection

Weakness Enumeration

CWE-94

Related Identifiers

BDU:2022-02791

CVE-2021-38659

ZDI-21-1084

Affected Products

365 Apps For Enterprise

Office

Office Powerpoint

References · 7

• https://zerodayinitiative.com/advisories/ZDI-21-1084 · Security Note
• https://nvd.nist.gov/vuln/detail/CVE-2021-38659 · Security Note
• https://portal.msrc.microsoft.com/en-US/security-guidance/advisory/CVE-2021-38659 · Vendor Advisory
• https://bdu.fstec.ru/vul/2022-02791 · Security Note
• https://msrc.microsoft.com/update-guide/en-US/vulnerability/CVE-2021-38659 · Vendor Advisory
• https://t.me/cvenotify/20954 · Telegram Post
• https://t.me/cvenotify/21417 · Telegram Post