Metadata Anonymisation Toolkit Information Disclosure Vulnerability

Metadata Anonymisation Toolkit MAT is a metadata anonymization toolkit. The toolkit supports the anonymization or deletion of metadata such as Word documents, images and music files. An information disclosure vulnerability exists in MAT versions 0.6 and 0.6.1. An attacker can exploit this...

DocuSign Phishing Campaign Includes Hancitor Downloader

Electronic document exchange vendor DocuSign warned on Monday of a wave of phishing emails targeting its customers with links to malicious Word documents. The campaign, it said, was tied to an earlier breach of its computer networks where hackers were able to gain “temporary access” and exfiltrat...

Locky Ransomware Roars Back to Life Via Necurs Botnet

Cybercriminals behind the Locky ransomware and Necurs botnet are back in business. Last Friday researchers spotted both delivering nearly 35,000 emails in just a few hours, the first major Locky campaign researchers have seen in months, according to Cisco Talos. Researchers warn the latest Locky...

Malware Hijacks Microphones to Spy On Ukrainian Businesses, Scientists and Media

Ukraine has once again been a target of a potential hacking attack that infected computer systems from dozens of Ukrainian businesses with highly sophisticated malware, allowing hackers to exfiltrate sensitive data and eavesdrop on their network. Late last year, the country also suffered a power...

Watch Out! First-Ever Word Macro Malware for Apple Mac OS Discovered in the Wild

After targeting Windows-based computers over the past few years, hackers are now shifting their interest to Macs as well. The emergence of the first macro-based Word document attack against Apple's macOS platform is the latest example to prove this. The concept of Macros dates back to 1990s. You...

CVE-2016-4047

An issue was discovered in Open-Xchange OX App Suite before 7.8.1-rev8. References to external Open XML document type definitions .dtd resources can be placed within .docx and .xslx files. Those resources were requested when parsing certain parts of the generated document. As a result an attacker...

Hancitor Malware Shifts Infection Strategies

Researchers said a new variant of the Hancitor downloader has shifted tactics and adopted new dropper strategies and obfuscation techniques on infected PCs. Researchers at Palo Alto Networks are currently tracking the biggest push of the Hancitor family of malware since June that it says has...

PowerWare Ransomware Masquerades as Locky to Intimidate Victims

A new variant of the PowerWare ransomware is stealing street creds from the Locky strain of ransomware in an attempt to spoof the malware family. A new sample of PowerWare found by Palo Alto Networks’ Unit 42 reveals the ransomware’s quickly evolving tactics. According to researchers, a new versi...

Open-Xchange AppSuite Information Disclosure Vulnerability (CNVD-2016-04412)

Open-Xchange AppSuite OX AppSuite is a suite of Web-based cloud desktop environments from Open-Xchange, Inc. in the United States. The environment allows users to manage email, tasks, files, etc. more intuitively. An information disclosure vulnerability exists in OX AppSuite 7.8.1 and earlier...

BlackEnergy APT Group Spreading Malware via Tainted Word Docs

Attackers have begun using rigged Microsoft Word documents propagated via spearphishing emails to spread the BlackEnergy Trojan. Researchers with Kaspersky Lab’s Global Research and Analysis Team discovered a malicious Word document last week that appears to stem from a campaign against one of th...

The vulnerability of the Microsoft Office suite, specifically the Word Viewer program for reading doc files, allows a perpetrator to execute arbitrary code.

The vulnerability of the Microsoft Office suite, including the Word Viewer program for reading DOC files, stems from buffer overflow attacks. Exploiting this vulnerability allows a malicious actor to execute arbitrary code using a specially crafted Office document...

Debian Security Advisory DSA 3394-1 (libreoffice - security update)

Multiple vulnerabilities have been discovered in LibreOffice, a full-featured office productivity: CVE-2015-4551Federico Scrinzi discovered an information leak in the handling of ODF documents. Quoting from https://www.libreoffice.org/about-us/security/advisories/cve-2015-4551/ : The LinkUpdateMo...

DSA-3394-1 libreoffice - security update

Bulletin has no description...

Bartalex Variants Spotted Dropping Pony, Dyre Malware

Some strains of Bartalex malware, a macro-based malware that first surfaced earlier this year, have recently been spotted dropping Pony loader malware and the Dyre banking Trojan. Primarily spread through spam, the first iterations of Bartalex were observed in late March embedded in Microsoft Wor...

Microsoft Word Line Formatting Denial of Service Vulnerability

Microsoft Word is an office word processing system developed by Microsoft. webGate is an APM solution for real-time monitoring and performance management of business-critical systems based on J2EE architecture. A security vulnerability in Microsoft Word line formatting allows an attacker to...

Microsoft Office multiple security vulnerabilities

Multiple memory corruptions on Microsoft Word documents parsing...

CVE-2013-3906: a graphics vulnerability exploited through Word documents

Recently we become aware of a vulnerability of a Microsoft graphics component that is actively exploited in targeted attacks using crafted Word documents sent by email. Today we are releasing Security Advisory 2896666 which includes a proactive Fix it workaround for blocking this attack while we...

CVE-2013-3906

creationtimestamp| type| source ---|---|--- 2013-11-05 07:00:00+00:00| seen| https://msrc.microsoft.com/blog/2013/11/cve-2013-3906-a-graphics-vulnerability-exploited-through-word-documents/ 2013-11-08 08:57:29+00:00| seen| MISP/527ca75e-353c-4c91-a7d5-407a950d2109 2013-11-08 09:23:16+00:00| seen|...

CVE-2012-0182

CVE-2012-0182 affects Microsoft Word 2007 SP2/SP3, where memory handling during Word document parsing can be exploited to execute arbitrary code via a crafted document (Word PAPX Section Corruption). The vulnerability enables remote code execution, with Microsoft’s mitigation being the MS12-064 s...

Ubuntu Update for koffice USN-1526-1

Ubuntu Update for Linux kernel vulnerabilities USN-1526-1 OpenVAS Vulnerability Test $Id: gbubuntuUSN15261.nasl 7960 2017-12-01 06:58:16Z santu $ Ubuntu Update for koffice USN-1526-1 Authors: System Generated Check Copyright: Copyright c 2012 Greenbone Networks GmbH, http://www.greenbone.net This...