Skip to content
OpenAdvisories
Critical MSRC-CVE-2023-24943 1 CVE

Windows Pragmatic General Multicast (PGM) Remote Code Execution Vulnerability

Published May 9, 2023 · Updated May 10, 2023 · Revision 2

Vendor: Microsoft

Summary

Impact: Remote Code Execution. Microsoft rating: Critical. Not known to be exploited — Exploitation Less Likely. Customer action: Required.

Details

How could an attacker exploit this vulnerability?
When Windows message queuing service is running in a PGM Server environment, an attacker could send a specially crafted file over the network to achieve remote code execution and attempt to trigger malicious code.

Security updates
10.0.17763.4377 — https://support.microsoft.com/help/5026362
10.0.20348.1726 — https://support.microsoft.com/help/5026370
10.0.20348.1724 — https://support.microsoft.com/help/5026456
10.0.19042.2965 — https://support.microsoft.com/help/5026361
10.0.22000.1936 — https://support.microsoft.com/help/5026368
10.0.22621.1702 — https://support.microsoft.com/help/5026372
10.0.10240.19926 — https://support.microsoft.com/help/5026382
10.0.14393.5921 — https://support.microsoft.com/help/5026363
6.0.6003.22070 — https://support.microsoft.com/help/5026408
6.0.6003.22070 — https://support.microsoft.com/help/5026427
6.1.7601.26519 — https://support.microsoft.com/help/5026413
6.1.7601.26519 — https://support.microsoft.com/help/5026426
6.2.9200.24266 — https://support.microsoft.com/help/5026419
6.2.9200.24266 — https://support.microsoft.com/help/5026411
6.3.9600.20969 — https://support.microsoft.com/help/5026415
6.3.9600.20969 — https://support.microsoft.com/help/5026409

Vulnerabilities 1

Revision history

  1. #2

    Added mitigation. This is an informational change only.

  2. #1

    Information published.

References