Дырка в Word и Excel

При открытии документа запускаются файлы riched20.dll и msi.dll из расоложения документа...

Дырки в IMP

IMP/MSWordView сохраняет временные файлы, содержащие документы Word. Это позволяет любому желающему подсмотреть эти файлы, кроме того возможна отака на отказ путем создания большого числа файлов...

word-access.txt

Georgi Guninski security advisory 17, 2000 MS Word and MS Access vulnerability - executing arbitrary programs, may be exploited by IE/Outlook Systems affected: MS Word and MS Access 2000 with or without Service Release 1a IE and Outlook may be also used, but are not needed / Windows 98 - almost...

MS Word and MS Access vulnerability - executing arbitrary programs, may be exploited by IE/Outlook

Georgi Guninski security advisory 17, 2000 MS Word and MS Access vulnerability - executing arbitrary programs, may be exploited by IE/Outlook Systems affected: MS Word and MS Access 2000 with or without Service Release 1a IE and Outlook may be also used, but are not needed / Windows 98 - almost...

Two Problems in IMP 2

Crimelabs, Inc. www.crimelabs.com Security Advisory Crimelabs Security Advisory CLABS200003 Title: IMP/MSWordView /tmp Problems Date: 22 April, 2000 Application: IMP with MSWordView Platform: Any supported by IMP, MSWordView Severity: Moderate -- anyone can view Word document attachments processe...

CVE-2000-0073

CVE-2000-0073 involves a buffer overflow in the Microsoft Rich Text Format (RTF) reader triggered by a malformed control word, leading to a denial of service. The affected software is the RTF reader component in Microsoft environments. The root cause is a buffer overflow condition, as described i...

CVE-2000-0073

Buffer overflow in Microsoft Rich Text Format RTF reader allows attackers to cause a denial of service via a malformed control word...

CVE-2000-0073: Undefined Security Weakness

Buffer overflow in Microsoft Rich Text Format RTF reader allows attackers to cause a denial of service via a malformed control word...

CVE-2000-0088

CVE-2000-0088 describes a buffer overflow in the conversion utilities for Word 5 documents (Japanese, Korean and Chinese) that allows a local attacker to execute arbitrary commands. The vulnerability is identified as the "Malformed Conversion Data" issue. The available references indicate a high ...

CVE-2000-0088: Undefined Security Weakness

Buffer overflow in the conversion utilities for Japanese, Korean and Chinese Word 5 documents allows an attacker to execute commands, aka the "Malformed Conversion Data" vulnerability...

CVE-1999-0354

This CVE (CVE-1999-0354) affects Internet Explorer 4.x/5.x when paired with Word 97, where a Word 97 template containing executable Visual Basic code can run arbitrary programs on the IE client without warning. The issue also applies to Outlook when viewing a malicious email. The underlying risk ...

CVE-1999-0354

Internet Explorer 4.x or 5.x with Word 97 allows arbitrary execution of Visual Basic programs to the IE client through the Word 97 template, which doesn't warn the user that the template contains executable content. Also applies to Outlook when the client views a malicious email message...

CVE-1999-0354: Undefined Security Weakness

Internet Explorer 4.x or 5.x with Word 97 allows arbitrary execution of Visual Basic programs to the IE client through the Word 97 template, which doesn't warn the user that the template contains executable content. Also applies to Outlook when the client views a malicious email message...

CVE-2000-0088

Buffer overflow in the conversion utilities for Japanese, Korean and Chinese Word 5 documents allows an attacker to execute commands, aka the "Malformed Conversion Data" vulnerability...

CVE-2000-0073

Buffer overflow in Microsoft Rich Text Format RTF reader allows attackers to cause a denial of service via a malformed control word...

CVE-1999-0354

Internet Explorer 4.x or 5.x with Word 97 allows arbitrary execution of Visual Basic programs to the IE client through the Word 97 template, which doesn't warn the user that the template contains executable content. Also applies to Outlook when the client views a malicious email message...

msie-4-5.outlook+word97.txt

Date: Wed, 27 Jan 1999 14:14:39 +0000 From: Vesselin Bontchev To: [email protected] Subject: IE 4/5/Outlook + Word 97 security hole Hello folks, This is not a strictly Windows NT issue - it affects Windows 9x users too. However, it is a very important one, so I decided to post abou...

word98.mac.txt

Article Title Macintosh version of Word '98 includes sensitive material in document files. Article Summary Microsoft recently released a patch that solves a serious security problem in Word '98 for Macintosh. It seems that Word '98 includes unrelated data taken from the hard-drive. This data can...

melissa.macro.virus.txt

Date: Fri, 26 Mar 1999 17:05:51 -0800 From: Aleph One To: [email protected] Subject: Melissa Macro Virus I normally don't allow virus posts through the list as they seldom represent a new threat, just a new example of an already existing one, but this one is getting enough play to warrant a...

melissa.txt

http://www.melissavirus.com/ ----------------------------------------------------------------- Date: Mon, 5 Apr 1999 05:01:14 -0700 From: [email protected] Subject: Information Security Educators Mailing List 1999-03-30 --------------------------------------------- From: "Rob Slade, doting grandpa o...