Microsoft Office Chinese Grammar Checker Insecure Library Loading (MS14-023; CVE-2014-1756)

An insecure library loading vulnerability has been reported in Microsoft Office proofing tools. The vulnerability is due to the way that the Chinese Simplified Grammar Checker component handles the loading of dynamic-link library .dll files. A remote attacker could exploit this vulnerability by...

Threatpost News Wrap, May 23, 2014

Dennis Fisher and Mike Mimoso discuss the US indictments of Chinese army officers for hacking, the Blackshades malware arrests, the new IE 8 zero day and the US prospects in the World Cup. Download: digitalunderground154.mp3 Music by Chris Gonsalves...

The U.S., China and Glass Houses

That was quite a show the government put on Monday. The dramatic press conference featuring Attorney General Eric Holder, the coordinated press leaks ahead of the announcement, the strong statements about the sanctity of American commerce and how the United States will prosecute those who conduct...

'Anonymous Philippines' hacks Hundreds of Chinese Government Websites

A Philippine Hacker group claiming ties with the hacktivist collective Anonymous defaced early Monday several Chinese Government websites. "Anonymous Philippines" claimed responsibility for defacing more than 200 Chinese websites in retaliation for Beijing's aggressive actions in the West...

U.S. Indicts Five Chinese Army Officers for Alleged Cyberespionage Operations

The United States government on Monday made an unprecedented move in its efforts to combat cyberespionage operations against American companies, efforts that until now had mainly consisted of strongly worded statements and diplomacy. The Department of Justice indicted five officers of the Chinese...

US Charges Five Chinese Military Officials with Economic Espionage

The United States has filed criminal charges against Chinese military officials for hacking and cyber espionage against several American companies. This case is first of its own kind in which the prosecutors have formally accused members of a foreign government with economic espionage charges...

CVE-2014-1756

Untrusted search path vulnerability in Microsoft Office 2007 SP3, 2010 SP1 and SP2, and 2013 Gold, SP1, RT, and RT SP1, when the Simplified Chinese Proofing Tool is enabled, allows local users to gain privileges via a Trojan horse DLL in the current working directory, as demonstrated by a directo...

Design/Logic Flaw

Untrusted search path vulnerability in Microsoft Office 2007 SP3, 2010 SP1 and SP2, and 2013 Gold, SP1, RT, and RT SP1, when the Simplified Chinese Proofing Tool is enabled, allows local users to gain privileges via a Trojan horse DLL in the current working directory, as demonstrated by a directo...

CVE-2014-1756

Microsoft Office CVE-2014-1756 is an untrusted search path/innocuous DLL-loading vulnerability in the Simplified Chinese Proofing Tool across Office 2007 SP3, 2010 SP1/SP2, and 2013 (Gold/SP1/RT). A local attacker could gain privileges by placing a malicious DLL in the current working directory a...

Microsoft Office Remote Code Execution Vulnerabilities (2961037)

This host is missing an important security update according to Microsoft Bulletin MS14-023. OpenVAS Vulnerability Test $Id: gbms14-023.nasl 6735 2017-07-17 09:56:49Z teissa $ Microsoft Office Remote Code Execution Vulnerabilities 2961037 Authors: Antu Sanadi Copyright: Copyright C 2014 Greenbone...

Microsoft Office Remote Code Execution Vulnerabilities (2961037)

This host is missing an important security update according to Microsoft Bulletin MS14-023. SPDX-FileCopyrightText: 2014 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only...

Microsoft Office Chinese Grammar Checking Feature CVE-2014-1756 Remote Code Execution Vulnerability

Description Microsoft Office is prone to a remote code-execution vulnerability. An attacker can leverage this issue to execute arbitrary code in the context of the currently logged-in user. Failed exploit attempts will likely result in denial-of-service conditions. Technologies Affected Microsoft...

Warning: Malware Campaign targeting Jailbroken Apple iOS Devices

A new piece of malicious malware infection targeting jailbroken Apple iOS devices in an attempt to steal users’ credentials, has been discovered by Reddit users. The Reddit Jailbreak community discovered the malicious infection dubbed as ‘Unflod Baby Panda’, on some jailbroken Apple iOS devices o...

The Keen Team - Chinese Hacker Group Reveals their Identities

The Keen Team – a mysterious group of Chinese hackers who hacked Apple’s Safari Mac OS X Mavericks system in just 20 seconds and Windows 8.1. Adobe Flash in only 15 seconds during Pwn2Own Hacking Competition this year, are no more mysterious as the team revealed its members identity. In an...

APT Groups Return - Chinese Hackers Resume Cyber Espionage Operations

Year back, one of the largest “Advanced Persistent Threat” APT hacking groups received widespread attention from the media and from the U.S. government. APT Groups are China’s cyber espionage units and they won’t stop their espionage operation, despite being exposed last year. Yes, APT hacking...

OpenSSL Heartbleed Bug Exploited Before This Week?

Bruce Schneier stood on the Source Boston keynote stage yesterday and used the word “ginormous” to describe the severity of the OpenSSL heartbleed bug. “My guess is that when heartbleed became public, the top 20 governments in the world started exploiting it immediately,” Schneier said. That’s...

Malaysian flight MH370 tragedy abused by Chinese hackers for Espionage attacks

The Mysterious Malaysian Airlines flight MH370, a Boeing 777-200 aircraft that has gone missing by the time it flew from Kuala Lumpur to Beijing. The Malaysian Prime Minister had also confirmed that the Malaysia Airlines plane had crashed in a remote part of the southern Indian Ocean. Cyber...

NSA Hacked Servers of Chinese telecom Huawei, Stole Source Codes

The US Government was publicly accusing Chinese electronics manufacturer Huawei of espionage from the past few years. Ironically, it has now been revealed that the National Security Agency conducted a major offensive cyber operations against the Chinese government and networking company Huawei, i...

Fedora Update for ibus-chewing FEDORA-2014-1910

Check for the Version of ibus-chewing OpenVAS Vulnerability Test Fedora Update for ibus-chewing FEDORA-2014-1910 Authors: System Generated Check Copyright: Copyright C 2014 Greenbone Networks GmbH, http://www.greenbone.net This program is free software; you can redistribute it and/or modify it...

[SECURITY] Fedora 19 Update: ibus-chewing-1.4.10.1-1.fc19

IBus-chewing is an IBus front-end of Chewing, an intelligent Chinese input method for Zhuyin BoPoMoFo users. It supports various Zhuyin keyboard layout, such as standard DaChen, IBM, Gin-Yeah, Eten, Eten 26, Hsu, Dvorak, Dvorak-Hsu, and DaChen26. Chewing also support toned Hanyu pinyin input...