Proof of Concept for Microsoft Word RTF Font Table Heap Corruption (CVE-2023-21716) Released

Web: https://fortiguard.fortinet.com/threat-signal-report/5046

Update 3/14 - Coverage section updated with available IPS signature.FortiGuard Labs is aware of a new proof of concept released over the weekend for CVE-2023-21716 (Microsoft Word Remote Code Execution Vulnerability).Patched in the February Microsoft Monthly Security Release, CVE-2023-21716 is a vulnerability within Microsoft Office's wwlib which allows attackers to achieve remote code execution on a targeted machine via the use of a maliciously crafted RTF document. What makes this vulnerability dangerous is that It does not require any user …

concept corruption cve cve-2023-21716 microsoft microsoft word rtf word