⬇ Download holy card: ·
Saint Follina, Who Opened Word and Called Diagnostics
Patron of Word documents received by email, protocols that run commands, and people who open attachments without thinking.
Life
On 27 May 2022 the nao_sec group flagged a suspicious Word document that gave Follina (CVE-2022-30190) its name. A crafted file invoked the Windows diagnostic tool, MSDT, through a special URL, and from there ran commands with the calling application's privileges, in some cases even from the file preview. The name comes from the town of Follina, whose dialling code appeared in the document.
Prayer
O Saint Follina, who calls diagnostics from the document, let our text files remain text. Amen.
How to celebrate
Celebrated by applying the June 2022 fix and, meanwhile, disabling the MSDT URL handler.
Open the document, set diagnostics to work.