Blog

Security Research

From One Vulnerability to Another: Outlook Patch Analysis Reveals Important Flaw in Windows API

Ben Barnea is a Security Researcher at Akamai with interest and experience in conducting low-level security research and vulnerability research across various architectures, including Windows, Linux, IoT, and mobile. He enjoys learning how complex mechanisms work and, more important, how they fail.

Editorial and additional contributions by Tricia Howard

\r\n Executive summary

\r\n"}}"> Editorial and additional contributions by Tricia Howard

Executive summary

\n Akamai researcher Ben Barnea found a new important vulnerability in an Internet Explorer component, assigned CVE-2023-29324 with a CVSS base score of 6.5.

\n

\n The vulnerability causes a Windows API function — MapUrlToZone — to incorrectly think that a remote path is a local one.

\n

\n MapUrlToZone is commonly used as a security measure.…