points by gruez 2 days ago | 0 comments
>I can't come with a reason why "An unauthenticated attacker could exploit this vulnerability by sending a specially crafted packet to an affected service over the network."
The Microsoft link doesn't mention this at all, so my guess it's "remote" in the sense that a zip file exploit is "remote"
[–] doubled112 2 days ago
Put it on a file share and now any file is "remote".
[–] jdiff 2 days ago
Remote, and inapplicable. One of the very few things the Microsoft link does mention that no user interaction is required. A banana left out in the walkway still requires the user to go for a walk.
[–] dofm 2 days ago
> A banana left out in the walkway still requires the user to go for a walk.
This is some Eric-Cantona-level gnomic mysticism. I approve.
https://msrc.microsoft.com/update-guide/vulnerability/CVE-20...
> How could an attacker exploit this vulnerability?
> An unauthenticated attacker could exploit this vulnerability by sending a specially crafted packet to an affected service over the network. Successful exploitation could allow the attacker to execute code on the target system. No authentication or user interaction is required..