Vulnerabilities in Microsoft 365 Apps

This report analyzes how Microsoft’s patch for CVE-2023-29344 (affecting FreeImage used in MSOSPECTRE.DLL) disabled only SKP files of the MFC type while leaving VFF-type SKP files able to trigger the same FreeImage flaws; the author details a PoC that modifies embedded ZIP image data, updates CRC/size fields and recalculates a VFF checksum to bypass the patch and reproduce numerous vulnerable conditions, leading to the assignation of CVE-2023-33146 and Microsoft subsequently disabling SketchUp insertion in Office as a mitigation.