Proof of Concept for Microsoft Word RTF Font Table Heap Corruption (CVE-2023-21716) Released

Update 3/14 - Coverage section updated with available IPS signature.FortiGuard Labs is aware of a new proof of concept released over the weekend for CVE-2023-21716 (Microsoft Word Remote Code Execution Vulnerability).Patched in the February Microsoft Monthly Security Release, CVE-2023-21716 is a vulnerability within Microsoft Office's wwlib which allows attackers to achieve remote code execution on a targeted machine via the use of a maliciously crafted RTF document. What makes this vulnerability dangerous is that It does not require any user …

attackers aware code code execution concept corruption cve cve-2023-21716 document february ips labs machine microsoft microsoft office microsoft word office release remote code remote code execution rtf security signature update vulnerability weekend word