Microsoft Office OneNote 2007 Remote Code Execution
Posted by deepcore on October 7, 2021 – 5:36 pm
Microsoft Office OneNote 2007 proof of concept exploit for a OnePKG file parsing remote code execution vulnerability. Upon decompressing files from .ONEPKG archives (using MS CAB format), a failure to sanitize file paths and file contents allows for arbitrary file planting in arbitrary locations on the OS, including the startup folder.
Post a reply
You must be logged in to post a comment.