Microsoft Addresses Snipping Tool Bug With CVE Assignment And Patch Release On Store

Republished By Plato

Followers: 0

Microsoft Addresses Snipping Tool Bug with CVE Assignment and Patch Release on Store

Microsoft has recently addressed a bug in its Snipping Tool application, which could have allowed attackers to execute arbitrary code on a victim’s system. The vulnerability was assigned the CVE-2021-31957 identifier and was classified as a “remote code execution” flaw. Microsoft has released a patch for the vulnerability, which is available on the Microsoft Store.

The Snipping Tool is a popular application that allows users to capture screenshots of their desktops or specific windows. The tool is included in Windows 10 and is widely used by users to capture images for various purposes. However, the tool had a bug that could have allowed attackers to execute arbitrary code on a victim’s system.

The vulnerability was discovered by security researcher Jonas Lykkegaard, who reported it to Microsoft in April 2021. The bug was caused by an issue with the way the Snipping Tool handled certain image files. Attackers could have exploited the vulnerability by sending a specially crafted image file to a victim and convincing them to open it using the Snipping Tool.

Once the victim opened the image file using the Snipping Tool, the attacker could have executed arbitrary code on their system. This could have allowed the attacker to take control of the victim’s computer, steal sensitive information, or install malware.

Microsoft has released a patch for the vulnerability, which is available on the Microsoft Store. The patch fixes the issue by improving the way the Snipping Tool handles image files. Users are advised to update their Snipping Tool application as soon as possible to ensure that they are protected from this vulnerability.

This is not the first time that Microsoft has addressed vulnerabilities in its Snipping Tool application. In 2019, Microsoft released a patch for a similar vulnerability that could have allowed attackers to execute code on a victim’s system. The vulnerability was caused by an issue with the way the Snipping Tool handled certain image files.

In conclusion, the recent vulnerability in the Snipping Tool application highlights the importance of keeping software up to date. Users should always ensure that they have the latest patches and updates installed on their systems to protect themselves from potential security threats. Microsoft’s quick response to the vulnerability is commendable, and users should take advantage of the patch to ensure that they are protected from this and other potential vulnerabilities.