Microsoft-Word-CVE-2017-0199-

Microsoft-Word-CVE-2017-0199- 描述：Microsoft Word CVE-2017-0199 容易通过 HTA 处理程序遭受远程代码执行。 Microsoft Office 和 WordPad 解析特制文件的方式存在一个远程代码执行漏洞。 成功利用此漏洞的攻击者可以完全控制受影响系统。 影响：攻击者可以利用此漏洞在应用程序上下文中执行任意命令。 利用尝试失败可能导致拒绝服务条件。 厂商主页：http://www.microsoft.com 致谢：@ShadowBrokerss @EquationGroup @Petya @juansacco...

The King is dead. Long live the King!

In late April 2018, a new zero-day vulnerability for Internet Explorer IE was found using our sandbox; more than two years since the last in the wild example CVE-2016-0189. This particular vulnerability and subsequent exploit are interesting for many reasons. The following article will examine th...

Microsoft Word and WordPad RTF HTA handler command execution

Added: 04/20/2017 CVE: CVE-2017-0199 BID: 97498 Background Rich Text Format RTF is a text file format supported by various Microsoft products and word processors. RTF supports text styling, images, and embedded objects. Problem A vulnerability in Microsoft Word and WordPad could allow command...

Microsoft Word and WordPad RTF HTA handler command execution

Added: 04/20/2017 CVE: CVE-2017-0199 BID: 97498 Background Rich Text Format RTF is a text file format supported by various Microsoft products and word processors. RTF supports text styling, images, and embedded objects. Problem A vulnerability in Microsoft Word and WordPad could allow command...

CVE-2017-0199: In the Wild Attacks Leveraging HTA Handler

FireEye recently detected malicious Microsoft Office RTF documents that leverage CVE-2017-0199, a previously undisclosed vulnerability. This vulnerability allows a malicious actor to download and execute a Visual Basic script containing PowerShell commands when a user opens a document containing ...