351 matches found
Microsoft Office Word free macro command execution flaw vulnerability 0day-vulnerability warning-the black bar safety net
If we inform you that in MS-Word on the presence of a Royal Decree to fulfill the vulnerability flaws of the bug, which unnecessary any macro maybe memory overflow? Windows for use between the stop data transfer supply a variety of transmission methods, this one is called static swap agreements, ...
Description of the security update for Excel 2016: September 12, 2017
None None...
Threat Round Up for Aug 25 - Sep 1
Today, Talos is publishing a glimpse into the most prevalent threats we've observed between August 25 and September 1. As with previous round-ups, this post isn't meant to be an in-depth analysis. Instead, this post will summarize the threats we've observed by highlighting key behavior...
Threat Analysis: Word Documents with Embedded Macros Leveraging Emotet Trojan
Many customers have recently asked how Carbon Black's solutions detect macros and droppers specifically referencing Emotet dropper files. Customers often say that macros and droppers are an ongoing problem in their environments. They are also seen day-to-day by most practitioners. The analysis...
Microsoft VBA Hidden Modules
Credits: Maxim Tomashevich / Thegrideon Software Website: https://www.thegrideon.com/ Details: https://www.thegrideon.com/vba-internals.html Vendor: --------------------- Microsoft Product: --------------------- Visual Basic for Applications VBA 6.5 - 7.1 x32 / x64 Vulnerability Details:...
New Fileless Malware Uses DNS Queries To Receive PowerShell Commands
It is no secret that cybercriminals are becoming dramatically more adept, innovative, and stealthy with each passing day. While new forms of cybercrime are on the rise, traditional activities seem to be shifting towards more clandestine techniques that involve the exploitation of standard system...
Malware Evades Detection with Novel Technique
Researchers have found a new strain of document-based macro malware that evades discovery by lying dormant when it detects a security researcher’s test environment. The malware, according to researcher Caleb Fenton with security firm SentinelOne, evades detection simply by counting the number of...
MS16-107: Description of the security update for PowerPoint 2013: September 13, 2016
MS16-107: Description of the security update for PowerPoint 2013: September 13, 2016 Summary This security update resolves vulnerabilities in Microsoft Office that could allow remote code execution if a user opens a specially crafted Microsoft Office file. To learn more about these vulnerabilitie...
MS16-107: Description of the security update for Office 2013: September 13, 2016
MS16-107: Description of the security update for Office 2013: September 13, 2016 Summary This security update resolves vulnerabilities in Microsoft Office that could allow remote code execution if a user opens a specially crafted Microsoft Office file. To learn more about these vulnerabilities, s...
Microsoft Warns of Sneaky New Macro Trick
Microsoft is warning of an innovative new technique attackers are using to sneak macro malware past virus detection engines and add to the already huge uptick in reported macro attacks. According to researchers at Microsoft’s Malware Protection Center, they stumbled upon the macro technique in a...
March 8, 2016, update for Visio 2016 (KB3114844)
None None...
March 8, 2016, update for Project 2016 (KB3114865)
None None...
MS15-116: Description of the security update for Access 2016: November 10, 2015
None None...
Malicious Microsoft Office Documents: Generate-Macro
This script will generate malicious Microsoft Excel Documents that contain VBA macros. This script will prompt you for an IP address and port you will receive your shell at this address and port and the name of the malicious document. From there, the script will then prompt you to choose from a...
Microsoft Visual Basic VBE6.DLL Stack Memory Corruption (MS10-031) - Ver2 (CVE-2010-0815)
Microsoft Visual Basic VBA is a technology for developing client desktop packaged applications and integrating them with existing data and systems. Microsoft Office products include VBA and make use of VBA to perform certain functions. A remote code execution vulnerability has been reported in th...
LibreOffice Unspecified Vulnerability (Oct 2014) - Mac OS X
LibreOffice is prone to an unspecified vulnerability. SPDX-FileCopyrightText: 2014 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only CPE = "cpe:/a:libreoffice:libreoffice";...
LibreOffice Unspecified Vulnerability (Oct 2014) - Windows
LibreOffice is prone to an unspecified vulnerability. SPDX-FileCopyrightText: 2014 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only CPE = "cpe:/a:libreoffice:libreoffice";...
LibreOffice < 4.2.5 Unspecified Macro Code Execution (Mac OS X)
A version of LibreOffice is installed on the remote Mac OS X host that is between versions 4.1.4 and 4.2.4. It is, therefore, affected by a vulnerability that allows the execution of unspecified VBA macros automatically. Note that Nessus has not attempted to exploit this issue, but has instead...
