CVE-2023-36884

This PoC generates a malicious DOCX file with an embedded RTF altChunk containing a linked OLE object. The exploit leverages CVE-2023-36884 to achieve RCE via crafted Office documents, as used in the Storm-0978 phishing campaign.

This repository contains PowerShell scripts for detecting and remediating CVE-2023-36884, a vulnerability in Microsoft Office. The scripts check and set registry keys to mitigate the vulnerability by blocking cross-protocol file navigation.

This repository contains PowerShell scripts to check, apply, and remove registry-based mitigations for CVE-2023-36884, a vulnerability in Microsoft Office applications. The scripts verify or modify registry keys to block cross-protocol file navigation as recommended by Microsoft.

This repository provides a PowerShell script to mitigate CVE-2023-36884 by configuring registry keys as recommended by Microsoft. It is not an exploit but a defensive measure.

This PoC mitigates CVE-2023-36884 by setting registry values to block cross-protocol file navigation in Microsoft Office applications. It modifies the registry to disable the vulnerability in applications like Word, Excel, and PowerPoint.

This repository contains only a README.md with references to Microsoft documentation and a hashtag mentioning Storm-0978, but no actual exploit code or technical details. It appears to be a placeholder or informational writeup.

This repository contains a writeup about a campaign abusing CVE-2023-36884, with no actual exploit code provided. It includes a disclaimer and references to the Storm0978 RomCom campaign.

This repository contains a C# application that applies a registry-based patch to mitigate CVE-2023-36884, a vulnerability in Microsoft Office. The tool checks for administrative privileges and Office installation before applying the patch.