Cyber Security

Microsoft Security Bulletin Warns of New Windows Print Spooler RCE Vulnerability

A day after releasing Patch Tuesday updates, Microsoft acknowledged yet another remote code execution vulnerability in the Windows Print Spooler component, adding that it’s working to remediate the issue in an upcoming security update.

Tracked as CVE-2021-36958 (CVSS score: 7.3), the unpatched flaw is the latest to join a list of bugs collectively known as PrintNightmare that have plagued the printer service and come to light in recent months. Victor Mata of FusionX, Accenture Security, who has been credited with reporting the flaw, said the issue was disclosed to Microsoft in December 2020.

Stack Overflow Teams

“A remote code execution vulnerability exists when the Windows Print Spooler service improperly performs privileged file operations,” the company said in its out-of-band bulletin, echoing the vulnerability details for CVE-2021-34481. “An attacker who successfully exploited this vulnerability could run arbitrary code with SYSTEM privileges. An attacker could then install programs; view, change, or delete data; or create new accounts with full user rights.”

Windows Print Spooler RCE Vulnerability

It’s worth noting that the Windows maker has since released updates to change the default Point and Print default behavior, effectively barring non-administrator users from installing or updating new and existing printer drivers using drivers from a remote computer or server without first elevating themselves to an administrator.

As workarounds, Microsoft is recommending users to stop and disable the Print Spooler service to prevent malicious actors from exploiting the vulnerability. The CERT Coordination Center, in a vulnerability note, is also advising users to block outbound SMB traffic to prevent connecting to a malicious shared printer.

Products You May Like

Articles You May Like

Japanese shipping giant to take part in tidal power project planned for Singapore
Samsung Galaxy Z Fold 4 Spotted on Amazon Ahead of Launch; Specifications, Features Tipped
PlayStation Summer Sale 2022 Round 2: Best Deals on PS5, PS4 Games
Iranian Hackers likely Behind Disruptive Cyberattacks Against Albanian Government
Vivo V25 Pro India Launch Teased, to Come With 64-Megapixel Triple Rear Camera Setup

Leave a Reply

Your email address will not be published.