Skip to content
OpenAdvisories
High MSRC-CVE-2023-35309 1 CVE

Microsoft Message Queuing (MSMQ) Remote Code Execution Vulnerability

Published Jul 11, 2023 · Updated Aug 16, 2023 · Revision 2

Summary

Impact: Remote Code Execution. Microsoft rating: Important. Not known to be exploited — Exploitation Less Likely. Customer action: Required.

Details

How could an attacker exploit this vulnerability?
To successfully exploit this vulnerability, the target server must be configured to allow remote activation of the COM object. In addition, the attacker must have sufficient user privileges on that server.

According to the CVSS metric, the attack complexity is high (AC:H). What does that mean for this vulnerability?
Successful exploitation of this vulnerability requires an attacker to win a race condition.

Security updates
10.0.17763.4645 — https://support.microsoft.com/help/5028168
10.0.20348.1850 — https://support.microsoft.com/help/5028171
10.0.22000.2176 — https://support.microsoft.com/help/5028182
10.0.19044.3208 — https://support.microsoft.com/help/5028166
10.0.22621.1992 — https://support.microsoft.com/help/5028185
10.0.10240.20048 — https://support.microsoft.com/help/5028186
10.0.14393.6085 — https://support.microsoft.com/help/5028169
6.0.6003.22175 — https://support.microsoft.com/help/5028222
6.0.6003.22175 — https://support.microsoft.com/help/5028226
6.1.7601.26623 — https://support.microsoft.com/help/5028240
6.1.7601.26623 — https://support.microsoft.com/help/5028224
6.2.9200.24374 — https://support.microsoft.com/help/5028232
6.2.9200.24374 — https://support.microsoft.com/help/5028233
6.3.9600.21063 — https://support.microsoft.com/help/5028228
6.3.9600.21075 — https://support.microsoft.com/help/5028223

Vulnerabilities 1

Revision history

  1. #2

    Acknowledgement added. This is an informational change only.

  2. #1

    Information published.

References