5694 matches found
Fwd: Microsoft Word macro vulnerability advisory MS01-034
Hi, Within minutes of Microsoft posting the bulletin on their site, my mailbox was swamped with emails from people asking the same two questions. I am therefore forwarding the below email minus the sample document! to the BugTraq mailing list to reach a wide audience and answer the two questions ...
Очередной способ обойти защиту от макросов в MS Word (Macro protection bypass)
Можно "повредить" документ таким образом, что сканер не распознает макрос, но при открытии макрос все равно будет выполнен...
Security Bulletin MS01-034
---------------------------------------------------------------------- Title: Malformed Word Document Could Enable Macro to Run Automatically Date: 21 June 2001 Software: Word Impact: Run macro without warning Bulletin: MS01-034 Microsoft encourages customers to review the Security Bulletin at:...
Дырка в Microsoft Word (template macro execution)
При выполнении макроса содержащегося в прикрепленном темплейте не выдается предупреждающее сообщение...
Security Bulletin MS01-028
---------------------------------------------------------------------- Title: RTF document linked to template can run macros without warning Date: 21 May 2001 Software: Microsoft Word for Windows and Word for the Mac Impact: Run Macros without warning Bulletin: MS01-028 Microsoft encourages...
CVE-2000-0788
The Mail Merge tool in Microsoft Word does not prompt the user before executing Visual Basic VBA scripts in an Access database, which could allow an attacker to execute arbitrary commands...
Security Bulletin (MS00-071)
Microsoft Security Bulletin MS00-071 ====================================== Patch Available for "Word Mail Merge" Vulnerability Originally posted: October 5, 2000 Summary ======= Microsoft has released a patch that eliminates a security vulnerability in Microsoftr Word 2000 and 97. The...
FW: DOS for Content Technologies' MAILsweeper for SMTP.
Hello, I have discovered a DOS for Content Technologies' MAILsweeper for SMTP product. This was completely accidental. I noticed that no mail was leaving the MAILsweeper SMTP gateway so I checked the queues... I had over 10,000 e-mails queued up! So I tried to stop the MIMEsweeper service, it...
Дырка в Word и Excel
При открытии документа запускаются файлы riched20.dll и msi.dll из расоложения документа...
Дырки в IMP
IMP/MSWordView сохраняет временные файлы, содержащие документы Word. Это позволяет любому желающему подсмотреть эти файлы, кроме того возможна отака на отказ путем создания большого числа файлов...
word-access.txt
Georgi Guninski security advisory 17, 2000 MS Word and MS Access vulnerability - executing arbitrary programs, may be exploited by IE/Outlook Systems affected: MS Word and MS Access 2000 with or without Service Release 1a IE and Outlook may be also used, but are not needed / Windows 98 - almost...
MS Word and MS Access vulnerability - executing arbitrary programs, may be exploited by IE/Outlook
Georgi Guninski security advisory 17, 2000 MS Word and MS Access vulnerability - executing arbitrary programs, may be exploited by IE/Outlook Systems affected: MS Word and MS Access 2000 with or without Service Release 1a IE and Outlook may be also used, but are not needed / Windows 98 - almost...
Two Problems in IMP 2
Crimelabs, Inc. www.crimelabs.com Security Advisory Crimelabs Security Advisory CLABS200003 Title: IMP/MSWordView /tmp Problems Date: 22 April, 2000 Application: IMP with MSWordView Platform: Any supported by IMP, MSWordView Severity: Moderate -- anyone can view Word document attachments processe...
CVE-2000-0073
CVE-2000-0073 involves a buffer overflow in the Microsoft Rich Text Format (RTF) reader triggered by a malformed control word, leading to a denial of service. The affected software is the RTF reader component in Microsoft environments. The root cause is a buffer overflow condition, as described i...
CVE-2000-0073
Buffer overflow in Microsoft Rich Text Format RTF reader allows attackers to cause a denial of service via a malformed control word...
CVE-2000-0088
CVE-2000-0088 describes a buffer overflow in the conversion utilities for Word 5 documents (Japanese, Korean and Chinese) that allows a local attacker to execute arbitrary commands. The vulnerability is identified as the "Malformed Conversion Data" issue. The available references indicate a high ...
CVE-1999-0354
Internet Explorer 4.x or 5.x with Word 97 allows arbitrary execution of Visual Basic programs to the IE client through the Word 97 template, which doesn't warn the user that the template contains executable content. Also applies to Outlook when the client views a malicious email message...
CVE-1999-0354
This CVE (CVE-1999-0354) affects Internet Explorer 4.x/5.x when paired with Word 97, where a Word 97 template containing executable Visual Basic code can run arbitrary programs on the IE client without warning. The issue also applies to Outlook when viewing a malicious email. The underlying risk ...