CERT-In Vulnerability Note
CIVN-2021-0383
Spoofing Vulnerability in Microsoft Windows AppX Installer
Original Issue Date:December 31, 2021
Severity Rating: HIGH
Software Affected
Overview
A vulnerability has been reported in Microsoft Windows AppX Installer which could allow a remote attacker to conduct a spoofing attack on the targeted system.
Description
This Vulnerability exists in Microsoft Windows Installer due to spoofing vulnerability in AppX installer that affects Microsoft Windows. A remote attacker could exploit this vulnerability by convincing a victim to open a specially crafted attachment.
Successful exploitation of this vulnerability could allow a remote attacker to conduct a spoofing attack on the targeted system.
Solution
Apply appropriates updates as mentioned by vendor:
https://msrc.microsoft.com/update-guide/vulnerability/CVE-2021-43890
Vendor Information
Microsoft Windows Installer
https://msrc.microsoft.com/update-guide/vulnerability/CVE-2021-43890
References
Microsoft Windows Installer
https://msrc.microsoft.com/update-guide/vulnerability/CVE-2021-43890
CVE Name
CVE-2021-43890
Disclaimer
The information provided herein is on "as is" basis, without warranty of any kind.
Contact Information
Email: info@cert-in.org.in Phone: +91-11-24368572
Postal address
Indian Computer Emergency Response Team (CERT-In)
Ministry of Electronics and Information Technology
Government of India
Electronics Niketan
6, CGO Complex, Lodhi Road,
New Delhi - 110 003
India
|