Microsoft Office Word RTF File Parsing Memory Corruption Remote Code Execution Vulnerability

🗓️ 15 Jan 2025 00:00:00Reported by Jmini, Rotiple, D4m0nType

zdi

zdi🔗 www.zerodayinitiative.com👁 7 Views

Remote code execution vulnerability in Microsoft Office Word due to RTF file parsing memory corruption.

Reporter	Title	Published	Views	Family All 55
GithubExploit	Exploit for Use After Free in Microsoft	20 Jan 202518:16	–	githubexploit
GithubExploit	Exploit for Use After Free in Microsoft	4 May 202618:53	–	githubexploit
GithubExploit	Exploit for Use After Free in Microsoft	7 Mar 202516:54	–	githubexploit
GithubExploit	Exploit for Use After Free in Microsoft	13 Sep 202509:24	–	githubexploit
GithubExploit	Exploit for Use After Free in Microsoft	9 Aug 202511:24	–	githubexploit
GithubExploit	Exploit for Use After Free in Microsoft	11 Oct 202519:40	–	githubexploit
Information Security Automation	January Microsoft Patch Tuesday	14 Jan 202523:22	–	avleonov
Information Security Automation	New episode “In the Trend of VM” (#12): 8 February CVEs & Why the Darknet Matters for VM Specialists	11 Mar 202510:10	–	avleonov
Information Security Automation	About Remote Code Execution – Windows OLE (CVE-2025-21298) vulnerability	23 Jan 202508:14	–	avleonov
BDU FSTEC	Vulnerability of the ole32.dll!UtOlePresStmToContentsStm function in Windows OLE operating systems, allowing a perpetrator to execute arbitrary code	21 Jan 202500:00	–	bdu_fstec

Source	Link
msrc	www.msrc.microsoft.com/update-guide/vulnerability/CVE-2025-21298

15 Jan 2025 00:00Current

6.9Medium risk

Vulners AI Score6.9

CVSS 37.8

EPSS0.80769

remote code execution microsoft office word rtf file parsing memory corruption user interaction required