CVE-2022-39025 U-Office Force PrintMessage function has insufficient filtering for special characters
To do that, he/she has to send malicious URL with special characters to a user who has enabled this Force Print feature in the system. In case of successful exploitation, attacker can obtain sensitive information (such as user name and password) via XSS attack mechanism. Force PrintMessage function is used to print documents from Windows system. Due to the presence of one-click option in this function, it can be exploited by remote attackers. An attacker can send malicious URL to force print a document on Windows 7/8/10 system. If user has enabled this feature in his/her system, then remote attacker can exploit this vulnerability to inject JavaScript code and perform XSS attack (Reflected Cross-Site Scripting). Force print is enabled by default in Windows 7 and Windows 8/10. It is enabled by default in Windows 7 and Windows 8/10 computer. To exploit this vulnerability, remote attacker has to send a malicious HTML file to user who has enabled Force Print feature in his/her system. In order to exploit this vulnerability, attacker has to send a malicious HTML file to target user. If user has enabled Force print feature in his/her system, then remote attacker can exploit this vulnerability to inject JavaScript code and perform XSS attack. Force print is enabled by default in Windows 7 and Windows 8/10. It is enabled by default in Windows 7 and Windows 8/10 computer. To exploit this vulnerability, remote attacker has to send a malicious HTML file to user who has
Windows Remote Code Execution Vulnerability – CVE-2018-0978
This vulnerability resides in Windows Remote Code Execution (RCE) mechanism which is used to execute arbitrary code on target system. An attacker can exploit this vulnerability by sending specially crafted malicious RCE Link to the target user with vulnerable software installed on the system. If a user clicks on RCE Link, then it will trigger execution of arbitrary code in vulnerable software installed on the remote system.
In order to exploit this vulnerability, remote attackers need to send a malicious RCE link to target user who has vulnerable software installed on his/her system. If user opens this link on browser and clicks on it, then attacker can exploit this vulnerability to execute arbitrary code.
Windows Command Line Interface (CLI) Privilege Escalation Vulnerability
In Windows command line interface (CLI), it is possible to escalate privileges to administrator. To exploit this vulnerability, attacker has to send malicious code as argument during command execution. The elevated privileges help the attacker perform unauthorized tasks. If user has enabled Force Print feature in his/her system, then remote attacker can exploit this vulnerability to inject JavaScript code and perform XSS attack (Reflected Cross-Site Scripting). Force print is enabled by default in Windows 7 and Windows 8/10. It is enabled by default in Windows 7 and Windows 8/10 computer. To exploit this vulnerability, remote attacker has to send a malicious HTML file to target user.
Timeline
Published on: 10/31/2022 07:15:00 UTC