EXPLOIT Windows PPTP Protocol CVE-2022-21972 Use After Free Vulnerability

Rule ID

1231394

Severity

High

Description

A remote code execution vulnerability has been reported in Microsoft Windows VPN component. The vulnerability is due to improper handling of PPTP packets.

Impact

Remote code execution

Recommendation

Update vendor's patch.

IPS Category

Buffer Overflow

IPS Anomaly Group

N/A

IPS Rule Default Action

Deny

References

Keywords

Windows 10, Windows 11, Windows 7, Windows 8.1, Windows RT 8.1, Windows Server, Windows Server 2008, Windows Server 2012, Windows Server 2016, Windows Server 2019