## https://sploitus.com/exploit?id=7B39BED7-523A-59FA-9459-B694CD966577
PoC exploit for CVE-2021-40444, a Microsoft Office Word RCE vulnerability. The target is Microsoft Office Word, with the vulnerability class being Remote Code Execution (RCE). The probable entry point is the `exploit.py` script, which is not specified how it is typically invoked. The exploit chain involves a malicious docx generator that exploits the vulnerability by storing a relationship in the document.xml.rels file, which points to a malicious HTML file. The HTML file is designed to trigger the "Preview" within MS Word, which then launches Internet Explorer to open the HTML link, ultimately leading to the execution of a DLL file via rundll32. The overlooked requirements for this exploit to work include the HTML file being at least 4096 bytes in size, and the presence of a Path traversal (ZipSlip) vulnerability in the CAB file. The expected impact is Remote Code Execution, and the observable network or file artifacts/IO include the execution of the DLL file via rundll32.