Microsoft Office Impacted With ‘Follina’ Zero-Day Vulnerability: Researchers

[Pelican Press 0]

This is the hidden content, please

• Sign In
• or
• Sign Up

Office Impacted With ‘Follina’ Zero-Day Vulnerability: Researchers

This is the hidden content, please

• Sign In
• or
• Sign Up

Office is found to have a zero-day vulnerability that can allow attackers to ******** code using a specially crafted Word file. Called Follina, the security issue can impact users the moment they open the malicious Word document on their system. It enables attackers to ******** PowerShell commands via

This is the hidden content, please

• Sign In
• or
• Sign Up

Diagnostic Tool (MSDT). Office 2013 and later versions are impacted by the Follina zero-day vulnerability, according to researchers.

This is the hidden content, please

• Sign In
• or
• Sign Up

has not yet brought its fix.

Tokyo-based cybersecurity research team Nao_sec publicly

This is the hidden content, please

• Sign In
• or
• Sign Up

the Follina vulnerability impacting

This is the hidden content, please

• Sign In
• or
• Sign Up

Office on

This is the hidden content, please

• Sign In
• or
• Sign Up

last week. Per the explanation provided by the researchers, the issue is allowing

This is the hidden content, please

• Sign In
• or
• Sign Up

Word to ******** a malicious code via MSDT even if macros are disabled.

This is the hidden content, please

• Sign In
• or
• Sign Up

provides macros as a series of commands and instructions that users can use to automate a particular task. However, the new vulnerability has enabled attackers to process a similar kind of automation, without using macros.

“The document uses the Word remote template feature to retrieve a HTML file from a remote Web server, which in turn uses the ms-msdt MSProtocol URI scheme to load some code and ******** some PowerShell,”

This is the hidden content, please

• Sign In
• or
• Sign Up

researcher Kevin Beaumont, who examined the issue raised by Nao_sec. “That should not be possible.”

Beaumont has named the vulnerability “Follina” since the spotted sample on the file references 0438, which is the area code of Italy’s Follina.

The vulnerability is believed to be exploited in the wild by some attackers.

Beaumont said that a file exploiting the loophole targeted a user in Russia over a month ago.

This is the hidden content, please

• Sign In
• or
• Sign Up

Office versions including Office 2013 as well as Office 2021 are found to be vulnerable to attacks due to the issue. Some versions of Office included with a

This is the hidden content, please

• Sign In
• or
• Sign Up

365 licence could also be targeted by attackers on both Windows 10 and Windows 11, the researchers have pointed out.

Initially,

This is the hidden content, please

• Sign In
• or
• Sign Up

was informed about the vulnerability in April, though the company did not consider it a security issue at the time, a security researcher on

This is the hidden content, please

• Sign In
• or
• Sign Up

This is the hidden content, please

• Sign In
• or
• Sign Up

.

This is the hidden content, please

• Sign In
• or
• Sign Up

, however, finally

This is the hidden content, please

• Sign In
• or
• Sign Up

the existence of the vulnerability on Monday. It is tracked as CVE-2022-30190.

In a post released on the

This is the hidden content, please

• Sign In
• or
• Sign Up

Security Response Center blog, the Redmond company also shared some workarounds, including the option to disable the MSDT URL protocol and turning on the turn-on cloud-delivered protection and automatic sample submission options on

This is the hidden content, please

• Sign In
• or
• Sign Up

Defender.

However,

This is the hidden content, please

• Sign In
• or
• Sign Up

has not yet provided an exact timeline on when we could see the fix coming for Office users.

Users, in the meantime, can stay safe by not opening any unknown

This is the hidden content, please

• Sign In
• or
• Sign Up

Word documents if they have an affected Office version on a Windows machine.

---

Affiliate links may be automatically generated – see our ethics statement for details.

This is the hidden content, please

• Sign In
• or
• Sign Up

This is the hidden content, please

• Sign In
• or
• Sign Up

office zero day vulnerability follina researchers word *******

This is the hidden content, please

• Sign In
• or
• Sign Up

office,

This is the hidden content, please

• Sign In
• or
• Sign Up

word,office 2021,

This is the hidden content, please

• Sign In
• or
• Sign Up

,follina vulnerability
#

This is the hidden content, please

• Sign In
• or
• Sign Up

#Office #Impacted #Follina #ZeroDay #Vulnerability #Researchers

This is the hidden content, please

• Sign In
• or
• Sign Up