CVE-2001-0628: Undefined Security Weakness

Microsoft Word 2000 does not check AutoRecovery .asd files for macros, which allows a local attacker to execute arbitrary macros with the user ID of the Word user...

CVE-2001-0501: Undefined Security Weakness

Microsoft Word 2002 and earlier allows attackers to automatically execute macros without warning the user by embedding the macros in a manner that escapes detection by the security scanner...

A variant of "Word Mail Merge" vulnerability

Title: A variant of "Word Mail Merge" vulnerability Authors: Err0r, 3APA3A Date: May, 03 2002 Affected: Office 97, 2000, XP Vendor: Microsoft Risk: Average to high Remote: for Office 2000 SR1a and prior Exploitable: Yes Vendor notified: February, 12 2002 Intro: All details on this issue may be...

CVE-2001-0240

Microsoft Word before Word 2002 is vulnerable to macros being executed automatically when opening an RTF document that links to a template containing the embedded macro. The root cause is Word’s failure to detect macros embedded in templates referenced by RTF documents, allowing a malicious docum...

CVE-2001-0240

Microsoft Word before Word 2002 allows attackers to automatically execute macros without warning the user via a Rich Text Format RTF document that links to a template with the embedded macro...

CVE-2001-0240: Undefined Security Weakness

Microsoft Word before Word 2002 allows attackers to automatically execute macros without warning the user via a Rich Text Format RTF document that links to a template with the embedded macro...

CVE-1999-1173

CVE-1999-1173 affects Corel WordPerfect 8 for Linux, where a temporary working directory is created with world-writable permissions. This can let local users (1) modify WordPerfect behavior by changing files in the working directory, or (2) modify other users’ files via a symlink attack. The prov...

CVE-1999-1173

Corel Word Perfect 8 for Linux creates a temporary working directory with world-writable permissions, which allows local users to 1 modify Word Perfect behavior by modifying files in the working directory, or 2 modify files of other users via a symlink attack...

CVE-1999-1173: Undefined Security Weakness

Corel Word Perfect 8 for Linux creates a temporary working directory with world-writable permissions, which allows local users to 1 modify Word Perfect behavior by modifying files in the working directory, or 2 modify files of other users via a symlink attack...

CVE-2001-0628

Microsoft Word 2000 does not check AutoRecovery .asd files for macros, which allows a local attacker to execute arbitrary macros with the user ID of the Word user...

CVE-2001-0501

Microsoft Word 2002 and earlier allows attackers to automatically execute macros without warning the user by embedding the macros in a manner that escapes detection by the security scanner...

CVE-2001-0240

Microsoft Word before Word 2002 allows attackers to automatically execute macros without warning the user via a Rich Text Format RTF document that links to a template with the embedded macro...

Security Bulletin MS01-034

---------------------------------------------------------------------- Title: Malformed Word Document Could Enable Macro to Run Automatically Date: 21 June 2001 Software: Word Impact: Run macro without warning Bulletin: MS01-034 Microsoft encourages customers to review the Security Bulletin at:...

Очередной способ обойти защиту от макросов в MS Word (Macro protection bypass)

Можно "повредить" документ таким образом, что сканер не распознает макрос, но при открытии макрос все равно будет выполнен...

Fwd: Microsoft Word macro vulnerability advisory MS01-034

Hi, Within minutes of Microsoft posting the bulletin on their site, my mailbox was swamped with emails from people asking the same two questions. I am therefore forwarding the below email minus the sample document! to the BugTraq mailing list to reach a wide audience and answer the two questions ...

Security Bulletin MS01-028

---------------------------------------------------------------------- Title: RTF document linked to template can run macros without warning Date: 21 May 2001 Software: Microsoft Word for Windows and Word for the Mac Impact: Run Macros without warning Bulletin: MS01-028 Microsoft encourages...

Дырка в Microsoft Word (template macro execution)

При выполнении макроса содержащегося в прикрепленном темплейте не выдается предупреждающее сообщение...

CVE-2000-0788

The Mail Merge tool in Microsoft Word does not prompt the user before executing Visual Basic VBA scripts in an Access database, which could allow an attacker to execute arbitrary commands...

Security Bulletin (MS00-071)

Microsoft Security Bulletin MS00-071 ====================================== Patch Available for "Word Mail Merge" Vulnerability Originally posted: October 5, 2000 Summary ======= Microsoft has released a patch that eliminates a security vulnerability in Microsoftr Word 2000 and 97. The...

FW: DOS for Content Technologies' MAILsweeper for SMTP.

Hello, I have discovered a DOS for Content Technologies' MAILsweeper for SMTP product. This was completely accidental. I noticed that no mail was leaving the MAILsweeper SMTP gateway so I checked the queues... I had over 10,000 e-mails queued up! So I tried to stop the MIMEsweeper service, it...