Memory Access Overflow Vulnerability in Extreme Office 2017 v1.0.3.2

Extreme Office is a minimal office office software developed by Beijing Haiteng Times Technology Co., Ltd. that supports the creation, editing and reading of Extreme Writing, Extreme Forms and Extreme Presentations as well as a simple interface and easy operation. Extreme Writing in Extreme Offic...

Extreme Office 2017 v1.0.3.2 suffers from a denial of service vulnerability

Extreme Office is an independently controlled office learning software developed by Beijing Haiteng Times Technology Co. Extreme Writing 2017 can create, modify and edit doc, docx files. A denial of service vulnerability exists in Extreme Writing in Extreme Office when dealing with special docx...

Processing .docx and .xlsx files with Python

MS Office documents are probably one of the most inconvenient and poorly formalized data sources. It's much better to keep all the data in specialized databases or at least in wiki. But in real life, MS Office documents are in active use in nearly every organization. Simply because it is a flexib...

DDEtect - Simple DDE Object Detector

Written by Amit Serper, @0xAmit DDEtector is a simple DDE object detector written in python Currently supports only word DOCX and legacy DOC files Prints the contents of the DDE payloads Note: In some cases DDEtect won't print the entire DDE payload. I'm working on writing a better matching...

Denial of Service Vulnerability in WPS Text

WPS office is an office software suite independently developed by Kingsoft Corporation. A denial of service vulnerability exists in WPS text wps.exe in WPSmain when parsing a specific docx file, which can be exploited by an attacker to cause a denial of service...

Memory out-of-bounds vulnerability in WPS Text (CNVD-2017-33980)

WPS office is an office software suite independently developed by Kingsoft Corporation. A memory out-of-bounds vulnerability exists in WPS text wps.exe in WPS when parsing a specific docx file, which can be exploited by an attacker to cause a denial of service or code execution...

Extreme Office 2017 suffers from a memory corruption vulnerability (CNVD-2017-31168)

Extreme Office is an independently controlled office learning software developed by Beijing Haiteng Times Technology Co. Extreme Writing 2017 can create, modify and edit doc, docx files. Extreme Writing in Extreme Office suffers from a memory corruption vulnerability when handling special docx...

Extreme Office 2017 suffers from a memory corruption vulnerability (CNVD-2017-31170)

Extreme Office is an independently controlled office learning software developed by Beijing Haiteng Times Technology Co. Extreme Writing 2017 can create, modify and edit doc, docx files. Extreme Writing in Extreme Office suffers from a memory corruption vulnerability when handling special docx...

Extreme Office 2017 suffers from a memory corruption vulnerability (CNVD-2017-31166)

Extreme Office is an independently controlled office learning software developed by Beijing Haiteng Times Technology Co. Extreme Writing 2017 can create, modify and edit doc, docx files. Extreme Writing in Extreme Office suffers from a memory corruption vulnerability when handling special docx...

Extreme Office 2017 suffers from a memory corruption vulnerability (CNVD-2017-31169)

Extreme Office is an independently controlled office learning software developed by Beijing Haiteng Times Technology Co. Extreme Writing 2017 can create, modify and edit doc, docx files. Extreme Writing in Extreme Office suffers from a memory corruption vulnerability when handling special docx...

Extreme Office 2017 suffers from a memory corruption vulnerability (CNVD-2017-31174)

Extreme Office is an independently controlled office learning software developed by Beijing Haiteng Times Technology Co. Extreme Writing 2017 can create, modify and edit doc, docx files. Extreme Writing in Extreme Office suffers from a memory corruption vulnerability when handling special docx...

Extreme Office 2017 suffers from a memory corruption vulnerability (CNVD-2017-31177)

Extreme Office is an independently controlled office learning software developed by Beijing Haiteng Times Technology Co. Extreme Writing 2017 can create, modify and edit doc, docx files. Extreme Writing in Extreme Office suffers from a memory corruption vulnerability when handling special docx...

Oracle Java and the Apache Xerces PDF/Docx Server DDOS vulnerability-vulnerability warning-the black bar safety net

One, flaws summary Oracle Java JDK/JRE（1.8.0.131 and earlier versions of the package and the Apache Xerces（2.11.0 version, there are two flaws, two flaws were: The Oracle JDK/JRE and-rebuff-do（DoS）flaws java. net. URLConnection not apply setConnectTimeout when and-rebuff-do. Oracle has received t...

Oracle Java JDK/JRE < 1.8.0.131 / Apache Xerces 2.11.0 - 'PDF/Docx' Server Side Denial of Service

Vulnerabilities Summary The following advisory describes two 2 vulnerabilities found in Oracle Java JDK/JRE 1.8.0.131 and previous versions packages and Apache Xerces 2.11.0 The vulnerabilities are: Oracle JDK/JRE Concurrency-Related Denial of Service java.net.URLConnection with no...

libreoffice security and bug fix update

1:5.0.6.2-14.0.1 - Replaced RedHat colors with Oracle colors, and the filename redhat.soc with oracle.soc in specfile - Build with --with-vendor='Oracle America, Inc.' 1:5.0.6.2-14 - Resolves: rhbz1454693 segv on interrupting tiled rendering 1:5.0.6.2-13 - Related: rhbz1444437 remove timer if...

HawkEye Credential Theft Malware Distributed in Recent Phishing Campaign

A wide variety of threat actors began distributing HawkEye malware through high-volume email campaigns after it became available for purchase via a public-facing website. The actors behind the phishing campaigns typically used email themes based on current events and media reports that would piqu...

HawkEye Credential Theft Malware Distributed in Recent Phishing Campaign

A wide variety of threat actors began distributing HawkEye malware through high-volume email campaigns after it became available for purchase via a public-facing website. The actors behind the phishing campaigns typically used email themes based on current events and media reports that would piqu...

FIN7 Evolution and the Phishing LNK

FIN7 is a financially-motivated threat group that has been associated with malicious operations dating back to late 2015. FIN7 is referred to by many vendors as “Carbanak Group”, although we do not equate all usage of the CARBANAK backdoor with FIN7. FireEye recently observed a FIN7 spear phishin...

FIN7 Evolution and the Phishing LNK

FIN7 is a financially-motivated threat group that has been associated with malicious operations dating back to late 2015. FIN7 is referred to by many vendors as “Carbanak Group”, although we do not equate all usage of the CARBANAK backdoor with FIN7. FireEye recently observed a FIN7 spear phishin...

WPS-Text has XXE vulnerability in docx parsing

WPS-Text is an office software. WPS-Text suffers from an XXE vulnerability in docx parsing. This allows attackers to exploit the vulnerability to cause the disclosure of sensitive user information as well as a DoS Denial of Service on the user's system...