CVE-2024-20677
CVSS 3.1 Score 7.8 of 10 (high)
Details
Summary
CVE-2024-20677 is a security vulnerability in FBX that could result in remote code execution. To address this issue, the ability to insert FBX files has been disabled in Word, Excel, PowerPoint, and Outlook for both Windows and Mac. Versions of Office that had this feature enabled, including Office 2019, Office 2021, Office LTSC for Mac 2021, and Microsoft 365, will no longer have access to it. Additionally, starting from February 13, 2024, the ability to insert FBX files has been disabled in 3D Viewer. However, previously inserted 3D models from FBX files will continue to function correctly unless the "Link to File" option was chosen during insertion. This change was implemented as part of the January 9, 2024 security update. The vulnerability poses a high risk with a base severity rating of 7.8 out of 10 and can lead to potential compromise of confidentiality and integrity.
Prevent cyber attacks with Recorded Future by prioritizing and patching critical vulnerabilities being exploited by threat actors targeting your industry. Book your demo to learn more.
Advisories, Assessments, and Mitigations
Prioritize, Pinpoint, and Act to Prevent Vulnerability Exploits with Recorded Future
- Gain complete coverage of your cyber, third party, and physical attack surface
- Proactively mitigate threats before they turn into costly attacks
- Make fast, effective, data-driven decisions