121 matches found
Microsoft Windows - Assembly Execution (MS12-005)
Microsoft Windows - Assembly Execution MS12-005 Exploit Title: MS12-005 : Microsoft Windows Assembly Execution Vulnerability Date: 1/14/2012 Author: Byoungyoung Lee, http://exploitshop.wordpress.com Version: Windows 7 32bit, fully patched until Jan 2012 Tested on: Windows 7 32bit CVE :...
Microsoft Office Word Malicious Macro Execution
This module injects a malicious macro into a Microsoft Office Word document docx. The comments field in the metadata is injected with a Base64 encoded payload, which will be decoded by the macro and execute as a Windows executable. For a successful attack, the victim is required to manually enabl...
Multi Manage Post Module Macro Execution
This module will execute a list of modules given in a macro file in the format of against the select session checking for compatibility of the module against the sessions and validation of the options provided. This module requires Metasploit: https://metasploit.com/download Current source:...
openSUSE Security Update : OpenOffice_org-base-drivers-postgresql (openSUSE-SU-2010:0386-1)
This update of OpenOfficeorg does not allow macros written in Python to be executed without permission, CVE-2010-0395. %NASLMINLEVEL 70300 C Tenable Network Security, Inc. The descriptive text and package checks in this plugin were extracted from openSUSE Security Update...
Debian DSA-2055-1 : openoffice.org - macro execution
It was discovered that OpenOffice.org, a full-featured office productivity suite that provides a near drop-in replacement for Microsoftr Office, is not properly handling python macros embedded in an office document. This allows an attacker to perform user-assisted execution of arbitrary code in...
Ubuntu 5.04 / 6.06 LTS : openoffice.org-amd64, openoffice.org vulnerabilities (USN-313-1)
It was possible to embed Basic macros in documents in a way that OpenOffice.org would not ask for confirmation about executing them. By tricking a user into opening a malicious document, this could be exploited to run arbitrary Basic code including local file access and modification with the user...
CVE-2007-4217
Stack-based buffer overflow in the domacro function in ftp in IBM AIX 5.2 and 5.3 allows local users to gain privileges via a long parameter to a macro, as demonstrated by executing a macro via the '$' command...
openSUSE 10 Security Update : OpenOffice_org (OpenOffice_org-1698)
Following security problems were found in OpenOfficeorg : - CVE-2006-2198: A security vulnerability in OpenOffice.org may make it possible to inject basic code into documents which is executed upon loading of the document. The user will not be asked or notified and the macro will have full access...
openoffice.org security update
CentOS Errata and Security Advisory CESA-2006:0573 Updated openoffice.org packages are now available. This update has been rated as having important security impact by the Red Hat Security Response Team. OpenOffice.org is an office productivity suite that includes desktop applications such as a...
CVE-2003-0664
Microsoft Word 2002, 2000, 97, and 98J does not properly check certain properties of a document, which allows attackers to bypass the macro security model and automatically execute arbitrary macros via a malicious document...
Microsoft Security Bulletin MS03-035: Flaw in Microsoft Word Could Enable Macros to Run Automatically(827653)
-----BEGIN PGP SIGNED MESSAGE----- - ------------------------------------------------------------------- Title: Flaw in Microsoft Word Could Enable Macros to Run Automatically 827653 Date: September 3, 2003 Software: Microsoft Word 97 Microsoft Word 98 J Microsoft Word 2000 Microsoft Word 2002...
CVE-2001-0628
Microsoft Word 2000 does not check AutoRecovery .asd files for macros, which allows a local attacker to execute arbitrary macros with the user ID of the Word user...
CVE-2001-0501
Microsoft Word 2002 and earlier allows attackers to automatically execute macros without warning the user by embedding the macros in a manner that escapes detection by the security scanner...
Microsoft PowerPoint and Excel fail to properly detect macros thereby automatically executing malicious code via crafted document (MS01-050)
Overview A malformed Microsoft Excel or PowerPoint document can bypass macro checking thereby allowing arbitrary code to be run on the target system. Description Microsoft Excel and PowerPoint scan documents when they are opened and check for the existence of macros. If the document contains...
CVE-2001-0240
Microsoft Word before Word 2002 allows attackers to automatically execute macros without warning the user via a Rich Text Format RTF document that links to a template with the embedded macro...
CVE-2001-0501
Microsoft Word 2002 and earlier allows attackers to automatically execute macros without warning the user by embedding the macros in a manner that escapes detection by the security scanner...
CVE-2001-0240
Microsoft Word before Word 2002 allows attackers to automatically execute macros without warning the user via a Rich Text Format RTF document that links to a template with the embedded macro...
Security Bulletin MS01-034
---------------------------------------------------------------------- Title: Malformed Word Document Could Enable Macro to Run Automatically Date: 21 June 2001 Software: Word Impact: Run macro without warning Bulletin: MS01-034 Microsoft encourages customers to review the Security Bulletin at:...
Security Bulletin MS01-028
---------------------------------------------------------------------- Title: RTF document linked to template can run macros without warning Date: 21 May 2001 Software: Microsoft Word for Windows and Word for the Mac Impact: Run Macros without warning Bulletin: MS01-028 Microsoft encourages...