VDB
BDU%3A2023-01104
BDU%3A2023-01104
PUBLISHED
CVSS 10 CRITICAL
Уязвимость текстового редактора Microsoft Word, связанная с выходом операции за границы буфера в памяти, позволяющая нарушителю выполнить произвольный код
Risk Scores
CVSS 2.0
10
Affected Products
| Vendor | Product | Versions |
|---|---|---|
| Microsoft Corp | Microsoft Office Web Apps Server 2013 Service Pack 1, Microsoft Word 2013 RT Service Pack 1, Microsoft SharePoint Foundation, Microsoft SharePoint Enterprise Server 2016, Microsoft Word 2013 Service Pack 1, Microsoft Word 2016, Microsoft SharePoint Enterprise Server, Microsoft Office 2019, Microsoft SharePoint Server 2019, Office Online Server, Microsoft 365 Apps for Enterprise, Microsoft SharePoint Server Subscription Edition, SharePoint Server Subscription Edition Language Pack, Microsoft Office LTSC 2021 |
Timeline
- Mar 6, 2023 CVE Published
- Mar 7, 2023 PoC Published
- Mar 1, 2024 PoC Published
- Jul 14, 2024 PoC Published
- Feb 25, 2025 PoC Published
- Sep 30, 2025 PoC Published
References
- https://msrc.microsoft.com/update-guide/vulnerability/CVE-2023-21716 url
- https://www.anti-malware.ru/news/2023-03-06-111332/40656 url
- https://qoop.org/publications/cve-2023-21716-rtf-fonttbl.md url
- https://support.microsoft.com/en-us/office/change-the-message-format-to-html-rich-text-format-or-plain-text-338a389d-11da-47fe-b693-cf41f792fefa?ui=en-us&rs=en-us&ad=us advisory