Maximize your protection, eliminate business risks.
Optimize and modernize with cloud transformation.
Empower your people to work securely from anywhere.
What it takes to convince leadership that migrating to the cloud is the right move.
Let us handle IT so you can focus on growing your business.
Get multichannel 24/7/365 expert end-user support.
Stay ahead of attacks with 24/7 protection and monitoring.
Maximize uptime with with industry-leading DRaaS.
Improve efficiency, productivity and outcomes with cloud.
Ensure all mobile devices, everywhere, are secure.
Gain a competitive edge with strategic IT solutions.
This battle-tested checklist enables your team to swiftly initiate a ransomware response.
IT for businesses of all sizes, in any industry.
Empower institution growth with custom IT solutions.
Ensure your firm is always in compliance.
Improve patient care and staff morale.
Deal with pressing legal matters, not IT.
Keep up with the evolving digital landscape.
Focus on your mission by outsourcing IT.
Accelerate PE client deals and secure data.
Leverage your technology as a strategic asset.
Execute initiatives and develop IT strategies.
Get the latest industry insights and trends.
Join us at events in person and online.
Hear from clients and learn more about strategic IT.
See how Dataprise can make IT your greatest asset.
Get informative technical resources from IT experts.
Stay on stop of emerging cybersecurity threats.
Discover the key areas of DR your organization needs to address to ensure downtime is minimized.
Gain a strategic asset by bringing harmony to IT.
Ensure 24/7 support and security with dedicated teams.
Drive business forward by partnering with Dataprise.
Meet our one-of-a-kind leadership team.
Discover the recognition Dataprise has earned.
Help us help businesses with strategic IT.
Embracing different perspectives and backgrounds.
Find a Dataprise location near you.
Dataprise is committed to empowering more women to consider a career in technology.
Posts
By: Dataprise
Table of content
A new vulnerability in MSHTML (Part of MS Office) is being actively exploited by malicious actors. This can enable malware execution through the MSHTML “web engine” functionality present in Office applications. The simplicity of opening a specially crafted MS Office document makes it ideal bait for phishing and spear-phishing attempts.
Once an emailed or shared Office document is opened by the user, the attacker could be able to execute malicious code with the permissions of the logged in user, potentially exposing the system and/or the entire network to a larger compromise.
Though the MSHTML engine is not a browser by itself, this engine is capable of displaying HTML web content, which allows the misuse of the vulnerability described in CVE-2021-40444 to deliver and execute a malicious payload.
Microsoft no longer recommends using Internet Explorer, the browser has been deprecated in modern versions of the Windows operating system for the new Microsoft Edge browser technology. Users should take care not to open unexpected files regardless, but vulnerable versions of the MSHTML web engine are still present in the Windows OS and Microsoft Office applications.
This exploit works like this:
This vulnerability can be exploited without any additional user input and is exploitable even when opening in “Protected View”. Dataprise recommends disabling ActiveX in Office altogether using the following process.
The following is an example of the ActiveX Settings area of the Trust Center.
If you change an ActiveX setting in Word, Access, Excel, PowerPoint, Publisher, or Visio, the settings are changed in all those programs.
Any machine running MS Windows and MS Office Package in any version.
Microsoft’s official mitigation is to enforce network-wide settings to disable ActiveX on Internet Explorer (and related applications) – this can be achieved through registry changes and/or GPOs.
According to Microsoft: “This can be accomplished for all sites by updating the registry. Previously-installed ActiveX controls will continue to run, but do not expose this vulnerability.
INSIGHTS
Subscribe to our blog to learn about the latest IT trends and technology best practices.