FILE Microsoft Outlook Elevation of Privilege Vulnerability (CVE-2023-23397)

Rule ID

1232367

Severity

Critical

Description

The vulnerability results from the receipt of a crafted Outlook MSG file where the "PidLidReminderFileParameter" - a message property that accepts a universal naming convention (UNC) path - is set to an attacker-controlled resource.

Impact

Privilege escalation

Recommendation

Update vendor's patch.

IPS Category

File vulnerabilities

IPS Anomaly Group

N/A

IPS Rule Default Action

Deny

Reference

Keyword

Windows Server 2019;