CVE-2023-23397 PoC — Microsoft Outlook Elevation of Privilege Vulnerability

Source

Associated Vulnerability

Readme

# CVE-2023-23397


## Description

Outlook suffers from a lack of control over the user input that allows to configure the sound of a meeting and appointment reminder. An attacker is able to force a victim to make a connection to its server without any manipulation from the user (zero click vulnerability).

An attacker exploiting this vulnerability retrieves a NetNTLMv2 digest based on the password of the trapped user through an SMB request. The request is triggered as soon as the mail arrives in the inbox.

Most POC will automatically display the meeting, this POC saves the item for storage that can be sent later.

File Snapshot

 [4.0K]  /data/pocs/9f71f782701c8a7edcdfc7531550d2cee2448b4a
├── [ 829]  poc.ps1
└── [ 624]  README.md

0 directories, 2 files

Remarks