54
- شناسه CVE-2025-21298 :CVE
- CWE-416 :CWE
- msrc.microsoft.com :Advisory
- منتشر شده: ژانویه 14, 2025
- به روز شده: ژانویه 24, 2025
- امتیاز: 9.8
- نوع حمله: Unknown
- اثر گذاری: Remote Code Execution
- برند: cissco
- محصول: Windows
- وضعیتPublished :CVE
- Yes :POC
- وضعیت آسیب پذیری: patch شده
چکیده
این آسیب پذیری تحت تأثیر یک تابع ناشناخته از کامپوننت (Object Linking and Embedding) OLE است.
OLE فناوری است که امکان جاسازی و پیوند دادن به اسناد و سایر آبجکت ها را فراهم می کند. ایجاد تغییرات در ورودی منجر به استفاده از حافظه پس از آزادسازی آن (Use After Free)می شود. از طریق این آسیب پذیری امکان انجام حمله از راه دور وجود دارد.
توضیحات
این آسیب پذیری در دسته CWE-416 است. ارجاع به حافظه پس از آزاد شدن آن می تواند باعث از کار افتادن برنامه، استفاده از مقادیر غیرمنتظره یا اجرای کد شود. محرمانه بودن، یکپارچگی و در دسترس بودن در اثر این آسیب پذیری تحت تأثیر قرار می گیرد. اکسپلویت این آسیب پذیری آسان بوده و به هیچ شکلی از احراز هویت نیاز ندارد.
در سناریوی حمله ایمیل، مهاجم می‌تواند با ارسال ایمیل ساخته‌شده مخصوص به قربانی، از آسیب‌پذیری سوء استفاده کند. سوء استفاده از آسیب‌پذیری ممکن است شامل باز کردن یک ایمیل ساخته‌شده خاص توسط قربانی با نسخه آسیب‌دیده نرم‌افزار Microsoft Outlook باشد، یا برنامه Outlook قربانی که پیش‌نمایش یک ایمیل ساخته‌شده ویژه را نمایش می‌دهد. این می تواند منجر به اجرای کد راه دور توسط مهاجم در دستگاه قربانی شود.
CVSS
| Score | Severity | Version | Vector String |
| 9.8 | CRITICAL | 3.1 | CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C |
لیست محصولات آسیب پذیر
| Versions | Platforms | Product |
| affected from 10.0.17763.0 before 10.0.17763.6775 | 32-bit Systems, x64-based Systems
|
Windows 10 Version 1809
|
| affected from 10.0.17763.0 before 10.0.17763.6775 | x64-based Systems
|
Windows Server 2019
|
| affected from 10.0.17763.0 before 10.0.17763.6775 | x64-based Systems
|
Windows Server 2019 (Server Core installation)
|
| affected from 10.0.20348.0 before 10.0.20348.3091 | x64-based Systems
|
Windows Server 2022
|
| affected from 10.0.19043.0 before 10.0.19044.5371 | 32-bit Systems, ARM64-based Systems, x64-based Systems
|
Windows 10 Version 21H2
|
| affected from 10.0.22621.0 before 10.0.22621.4751 | ARM64-based Systems, x64-based Systems
|
Windows 11 version 22H2
|
| affected from 10.0.19045.0 before 10.0.19045.5371 | x64-based Systems, ARM64-based Systems, 32-bit Systems
|
Windows 10 Version 22H2
|
| affected from 10.0.26100.0 before 10.0.26100.2894 | x64-based Systems
|
Windows Server 2025 (Server Core installation)
|
| affected from 10.0.22631.0 before 10.0.22631.4751 | ARM64-based Systems
|
Windows 11 version 22H3
|
| affected from 10.0.22631.0 before 10.0.22631.4751 | x64-based Systems
|
Windows 11 Version 23H2
|
| affected from 10.0.25398.0 before 10.0.25398.1369 | x64-based Systems
|
Windows Server 2022, 23H2 Edition (Server Core installation)
|
| affected from 10.0.26100.0 before 10.0.26100.2894 | ARM64-based Systems, x64-based Systems
|
Windows 11 Version 24H2
|
| affected from 10.0.26100.0 before 10.0.26100.2894 | x64-based Systems
|
Windows Server 2025
|
| affected from 10.0.10240.0 before 10.0.10240.20890 | 32-bit Systems, x64-based Systems
|
Windows 10 Version 1507
|
| affected from 10.0.14393.0 before 10.0.14393.7699 | 32-bit Systems, x64-based Systems
|
Windows 10 Version 1607
|
| affected from 10.0.14393.0 before 10.0.14393.7699 | x64-based Systems
|
Windows Server 2016
|
| affected from 10.0.14393.0 before 10.0.14393.7699 | x64-based Systems
|
Windows Server 2016 (Server Core installation)
|
| affected from 6.0.6003.0 before 6.0.6003.23070 | 32-bit Systems
|
Windows Server 2008 Service Pack 2
|
| affected from 6.0.6003.0 before 6.0.6003.23070 | 32-bit Systems, x64-based Systems
|
Windows Server 2008 Service Pack 2 (Server Core installation)
|
| affected from 6.0.6003.0 before 6.0.6003.23070 | x64-based Systems
|
Windows Server 2008 Service Pack 2
|
| affected from 6.1.7601.0 before 6.1.7601.27520 | x64-based Systems
|
Windows Server 2008 R2 Service Pack 1
|
| affected from 6.1.7601.0 before 6.1.7601.27520 | x64-based Systems
|
Windows Server 2008 R2 Service Pack 1 (Server Core installation)
|
| affected from 6.2.9200.0 before 6.2.9200.25273 | x64-based Systems
|
Windows Server 2012
|
| affected from 6.2.9200.0 before 6.2.9200.25273 | x64-based Systems
|
Windows Server 2012 (Server Core installation)
|
| affected from 6.3.9600.0 before 6.3.9600.22371 | x64-based Systems
|
Windows Server 2012 R2
|
| affected from 6.3.9600.0 before 6.3.9600.22371 | x64-based Systems
|
Windows Server 2012 R2 (Server Core installation)
|
لیست محصولات بروز شده
| Product | Impact | Max Severity | Build Number |
| Windows Server 2012 R2 (Server Core installation) | Remote Code Execution | Critical | 6.3.9600.22371 |
| Windows Server 2012 R2 | Remote Code Execution | Critical | 6.3.9600.22371 |
| Windows Server 2012 (Server Core installation) | Remote Code Execution | Critical | 6.2.9200.25273 |
| Windows Server 2012 | Remote Code Execution | Critical | 6.2.9200.25273 |
| Windows Server 2008 R2 for x64-based Systems Service Pack 1 (Server Core installation) | Remote Code Execution | Critical | 6.1.7601.27520 |
| Windows Server 2008 R2 for x64-based Systems Service Pack 1 (Server Core installation) | Remote Code Execution | Critical | 6.1.7601.27520 |
| Windows Server 2008 R2 for x64-based Systems Service Pack 1 | Remote Code Execution | Critical | 6.1.7601.27520 |
| Windows Server 2008 R2 for x64-based Systems Service Pack 1 | Remote Code Execution | Critical | 6.1.7601.27520 |
| Windows Server 2008 for x64-based Systems Service Pack 2 (Server Core installation) | Remote Code Execution | Critical | 6.0.6003.23070 |
| Windows Server 2008 for x64-based Systems Service Pack 2 (Server Core installation) | Remote Code Execution | Critical | 6.0.6003.23070 |
| Windows Server 2008 for x64-based Systems Service Pack 2 | Remote Code Execution | Critical | 6.0.6003.23070 |
| Windows Server 2008 for x64-based Systems Service Pack 2 | Remote Code Execution | Critical | 6.0.6003.23070 |
| Windows Server 2008 for 32-bit Systems Service Pack 2 (Server Core installation) | Remote Code Execution | Critical | 6.0.6003.23070 |
| Windows Server 2008 for 32-bit Systems Service Pack 2 (Server Core installation) | Remote Code Execution | Critical | 6.0.6003.23070 |
| Windows Server 2008 for 32-bit Systems Service Pack 2 | Remote Code Execution | Critical | 6.0.6003.23070 |
| Windows Server 2008 for 32-bit Systems Service Pack 2 | Remote Code Execution | Critical | 6.0.6003.23070 |
| Windows Server 2016 (Server Core installation) | Remote Code Execution | Critical | 10.0.14393.7699 |
| Windows Server 2016 | Remote Code Execution | Critical | 10.0.14393.7699 |
| Windows 10 Version 1607 for x64-based Systems | Remote Code Execution | Critical | 10.0.14393.7699 |
| Windows 10 Version 1607 for 32-bit Systems | Remote Code Execution | Critical | 10.0.14393.7699 |
| Windows 10 for x64-based Systems | Remote Code Execution | Critical | 10.0.10240.20890 |
| Windows 10 for 32-bit Systems | Remote Code Execution | Critical | 10.0.10240.20890 |
| Windows Server 2025 | Remote Code Execution | Critical | 10.0.26100.2894 |
| Windows 11 Version 24H2 for x64-based Systems | Remote Code Execution | Critical | 10.0.26100.2894 |
| Windows 11 Version 24H2 for ARM64-based Systems | Remote Code Execution | Critical | 10.0.26100.2894 |
| Windows Server 2022, 23H2 Edition (Server Core installation) | Remote Code Execution | Critical | 10.0.25398.1369 |
| Windows 11 Version 23H2 for x64-based Systems | Remote Code Execution | Critical | 10.0.22631.4751 |
| Windows 11 Version 23H2 for ARM64-based Systems | Remote Code Execution | Critical | 10.0.22631.4751 |
| Windows Server 2025 (Server Core installation) | Remote Code Execution | Critical | 10.0.26100.2894 |
| Windows 10 Version 22H2 for 32-bit Systems | Remote Code Execution | Critical | 10.0.19045.5371 |
| Windows 10 Version 22H2 for ARM64-based Systems | Remote Code Execution | Critical | 10.0.19045.5371 |
| Windows 10 Version 22H2 for x64-based Systems | Remote Code Execution | Critical | 10.0.19045.5371 |
| Windows 11 Version 22H2 for x64-based Systems | Remote Code Execution | Critical | 10.0.22621.4751 |
| Windows 11 Version 22H2 for ARM64-based Systems | Remote Code Execution | Critical | 10.0.22621.4751 |
| Windows 10 Version 21H2 for x64-based Systems | Remote Code Execution | Critical | 10.0.19044.5371 |
| Windows 10 Version 21H2 for ARM64-based Systems | Remote Code Execution | Critical | 10.0.19044.5371 |
| Windows 10 Version 21H2 for 32-bit Systems | Remote Code Execution | Critical | 10.0.19044.5371 |
| Windows Server 2022 (Server Core installation) | Remote Code Execution | Critical | 10.0.20348.3091 |
| Windows Server 2022 | Remote Code Execution | Critical | 10.0.20348.3091 |
| Windows Server 2019 (Server Core installation) | Remote Code Execution | Critical | 10.0.17763.6775 |
| Windows Server 2019 | Remote Code Execution | Critical | 10.0.17763.6775 |
| Windows 10 Version 1809 for x64-based Systems | Remote Code Execution | Critical | 10.0.17763.6775 |
| Windows 10 Version 1809 for 32-bit Systems | Remote Code Execution | Critical | 10.0.17763.6775 |
نتیجه گیری
برای کمک به محافظت در برابر این آسیب‌پذیری، توصیه می‌کنیم کاربران ایمیل‌های خود را به صورت متن ساده (Plain Text) مشاهده کنند.
تأثیر این روش:
ایمیل‌هایی که به صورت متن ساده مشاهده می‌شوند، شامل تصاویر، فونت‌های خاص، انیمیشن‌ها یا محتوای کامل و جامع دیگر (Rich Text) نخواهند بود.
این تغییرات در پنجره پیش‌نمایش و پیام‌های باز شده اعمال می‌شود.
تصاویر به صورت پیوست (Attachment) نمایش داده می‌شوند تا حذف نشوند.
از آنجا که ایمیل همچنان در قالب Rich Text یا HTML در حافظه ذخیره می‌شود، مدل شیء (Object Model) یا کدهای سفارشی ممکن است رفتار غیرمنتظره‌ای داشته باشند.
منابع
- https://www.cve.org/CVERecord?id=CVE-2025-21298
- https://www.cvedetails.com/cve/CVE-2025-21298/
- https://msrc.microsoft.com/update-guide/vulnerability/CVE-2025-21298
- https://vulmon.com/vulnerabilitydetails?qid=CVE-2025-21298
- https://vuldb.com/?id.291743
- https://cwe.mitre.org/data/definitions/416.html
- https://cybersecuritynews.com/outlook-zero-click-rce-vulnerability-cve-2025-21298
