Hacker News new | past | comments | ask | show | jobs | submit
>I can't come with a reason why "An unauthenticated attacker could exploit this vulnerability by sending a specially crafted packet to an affected service over the network."

The Microsoft link doesn't mention this at all, so my guess it's "remote" in the sense that a zip file exploit is "remote"

It absolutely does, in the "FAQ" section:

https://msrc.microsoft.com/update-guide/vulnerability/CVE-20...

> How could an attacker exploit this vulnerability?

> An unauthenticated attacker could exploit this vulnerability by sending a specially crafted packet to an affected service over the network. Successful exploitation could allow the attacker to execute code on the target system. No authentication or user interaction is required..

{"deleted":true,"id":50387666,"parent":50387002,"time":1793934412,"type":"comment"}
Put it on a file share and now any file is "remote".
loading story #50387672