Microsoft Word Remote Code Execution Vulnerability
🔗 CVE IDs covered (1)
📋 Description
What is the attack vector for this vulnerability? An unauthenticated attacker could send a malicious e-mail containing an RTF payload that would allow them to gain access to execute commands within the application used to open the malicious file.
Is the Preview Pane an attack vector for this vulnerability? Yes, the Preview Pane is an attack vector.
I am running SharePoint Enterprise Server 2013 Service Pack 1. Do I need to install all the updates that are listed for SharePoint Enterprise Server 2013 Service Pack 1? No. Customers running SharePoint Enterprise Server 2013 Service Pack 1 should install either of the following: Cumulative update (ubersrv13). Note that this update also includes the *srvloc2013 update Both of the security updates (sts2013 AND *loc2013), which are the same updates as for Foundation Server 2013 Please note that this is a clarification of the existing servicing model for SharePoint Server 2013 and applies for all previous updates.
I am running SharePoint Foundation 2013 Service Pack 1. Do I need to install all the updates that are listed for SharePoint Foundation 2013 Service Pack 1 ? Yes, customers running SharePoint Foundation 2013 Service Pack 1 should install both of the security updates. The updates can be installed in any order.
🎯 Affected products21
- Microsoft 365 Apps for Enterprise for 32-bit Systems
- Microsoft 365 Apps for Enterprise for 64-bit Systems
- Microsoft Office 2019 for 32-bit editions
- Microsoft Office 2019 for 64-bit editions
- Microsoft Office 2019 for Mac
- Microsoft Office LTSC 2021 for 32-bit editions
- Microsoft Office LTSC 2021 for 64-bit editions
- Microsoft Office LTSC for Mac 2021
- Microsoft Office Online Server
- Microsoft Office Web Apps Server 2013 Service Pack 1
- Microsoft SharePoint Enterprise Server 2013 Service Pack 1
- Microsoft SharePoint Enterprise Server 2016
- Microsoft SharePoint Foundation 2013 Service Pack 1
- Microsoft SharePoint Server 2019
- Microsoft SharePoint Server Subscription Edition
- Microsoft Word 2013 RT Service Pack 1
- Microsoft Word 2013 Service Pack 1 (32-bit editions)
- Microsoft Word 2013 Service Pack 1 (64-bit editions)
- Microsoft Word 2016 (32-bit edition)
- Microsoft Word 2016 (64-bit edition)
- SharePoint Server Subscription Edition Language Pack
✅ Remediation
KBRelease Notes (Security Update) — fixed build 16.70.23021201 KBClick to Run (Security Update) — fixed build https://aka.ms/OfficeSecurityReleases KB5002353 (Security Update) — fixed build 16.0.15601.20478 KB5002352 (Security Update) — fixed build 16.0.15601.20478 KB5002309 (Security Update) — fixed build 16.0.10395.20001 KB5002325 (Security Update) — fixed build 16.0.5383.1000 KB5002346 (Cumulative Update) — fixed build 15.0.5529.1000 KB5002347 (Security Update) — fixed build 15.0.5529.1000 KB5002312 (Security Update) — fixed build 15.0.5529.1000 KB5002342 (Security Update) — fixed build 16.0.10395.20001 KB5002330 (Security Update) — fixed build 16.0.10395.20001 KB5002323 (Security Update) — fixed build 16.0.5383.1000 KB5002313 (Security Update) — fixed build 15.0.5529.1000 KB5002316 (Security Update) — fixed build 15.0.5529.1000
🔗 References (30)
- advisoryhttps://msrc.microsoft.com/update-guide/vulnerability/CVE-2023-21716
- patchhttps://go.microsoft.com/fwlink/p/?linkid=831049
- referencehttps://docs.microsoft.com/en-us/officeupdates/microsoft365-apps-security-updates
- patchhttps://www.microsoft.com/download/details.aspx?familyid=90406070-0c55-4dd4-bf7c-61a3523ed220
- referencehttps://support.microsoft.com/help/5002353
- patchhttps://www.microsoft.com/download/details.aspx?familyid=0a2caffa-58d4-45b7-bce7-1d2de1cb09d7
- referencehttps://support.microsoft.com/help/5002352
- patchhttps://www.microsoft.com/download/details.aspx?familyid=7fb06917-0c3f-457b-b56c-97d9e6fbf0d8
- referencehttps://support.microsoft.com/help/5002309
- patchhttps://www.microsoft.com/download/details.aspx?familyid=fc35bf36-03cc-4441-9f38-dcdde9755a51
- referencehttps://support.microsoft.com/help/5002325
- patchhttps://www.microsoft.com/download/details.aspx?familyid=75ca0d88-aad3-4a05-8d05-3d00d5cf048b
- referencehttps://support.microsoft.com/help/5002346
- patchhttps://www.microsoft.com/download/details.aspx?familyid=7d0f3c40-8269-4ed6-967b-2b1eb06f7dee
- referencehttps://support.microsoft.com/help/5002347
- patchhttps://www.microsoft.com/download/details.aspx?familyid=ee2b8387-411a-4329-9018-60ba1b61302d
- referencehttps://support.microsoft.com/help/5002312
- patchhttps://www.microsoft.com/download/details.aspx?familyid=e6d1379c-3d38-45c6-8b2d-28f1c9dbebcd
- referencehttps://support.microsoft.com/help/5002342
- patchhttps://www.microsoft.com/download/details.aspx?familyid=3e88ed98-7ca7-4164-9cc8-56f80eb8caad
- referencehttps://support.microsoft.com/help/5002330
- patchhttps://www.microsoft.com/download/details.aspx?familyid=c1e7e62f-6348-4d1b-ba92-ced7a2da1e8d
- referencehttps://support.microsoft.com/kb/5002323
- patchhttps://www.microsoft.com/download/details.aspx?familyid=ce73ac0a-3564-4fc7-8a29-53a3e6d1c03a
- patchhttps://www.microsoft.com/download/details.aspx?familyid=768c0e00-41aa-410e-a146-58b8d367505f
- referencehttps://support.microsoft.com/kb/5002313
- patchhttps://www.microsoft.com/download/details.aspx?familyid=8e2feab3-1009-4033-9621-e2f04bba5636
- referencehttps://support.microsoft.com/kb/5002316
- referencehttps://support.microsoft.com/help/5002316
- patchhttps://www.microsoft.com/download/details.aspx?familyid=b41b90c9-8d7e-43fc-b52b-665da3b781b8