Microsoft Office Outlook Vulnerability (CVE-2023-23397) Appearance and Manual Measure Guide

AhnLab Security Emergency response Center (ASEC) recently published a notice about a Microsoft Office Outlook vulnerability.

CVE-2023-23397 is a vulnerability that leaks a user’s account credentials upon receiving an email and triggering a notification. The stolen information includes the ‘NTLM’ hash value, which contains the password hashing information for the logged-in account. Threat actors can exploit this information for internal propagation and further compromise of the system.

The application of security …

account ahnlab application asec center compromise credentials cve cve-2023-23397 email emergency escalation exploit exposure guide hash hashing information internal leaks malware analysis measure microsoft microsoft office notice notification ntlm office outlook password patches privilege privilege escalation response security stolen system threat threat actors value vulnerabilities vulnerability warning