Lucene search

K
cnvdChina National Vulnerability DatabaseCNVD-2022-71976
HistoryApr 15, 2022 - 12:00 a.m.

Microsoft Windows Fax Compose Form Remote Code Execution Vulnerability

2022-04-1500:00:00
China National Vulnerability Database
www.cnvd.org.cn
11
microsoft
windows
fax
remote code execution
vulnerability
network
attack
arbitrary code

EPSS

0.424

Percentile

97.4%

Microsoft Windows Fax services is a feature component service of Microsoft Corporation (USA) used to specify fax settings, including how to send, receive, view and print. A remote code execution vulnerability exists in Microsoft Windows Fax Compose Form, which is used to specify fax settings, including how to send, receive, view, and print. The vulnerability stems from a failure of the network system or product to properly filter special elements of the code segment during the construction of the external input data. An attacker could use this vulnerability to execute arbitrary code on the system.