Rocksolid Light

Welcome to novaBBS (click a section below)

mail  files  register  nodelist  faq  login

Love sometimes expresses itself in sacrifice. -- Kirk, "Metamorphosis", stardate 3220.3


rocksolid / Offtopic / Automatic execution of code in Word is a feature, says Microsoft__

SubjectAuthor
o Automatic execution of code in Word is a feature, says Microsoft__Anonymous

1
Subject: Automatic execution of code in Word is a feature, says Microsoft__
From: Anonymous
Newsgroups: rocksolid.shared.offtopic
Organization: RetroBBS II
Date: Wed, 11 Oct 2017 16:51 UTC
From: roo...@192.168.0.42 (Anonymous)
To: rocksolid.shared.offtopic
Subject: Automatic execution of code in Word is a feature, says Microsoft__
Message-ID: <orli75$805$1@retrobbs2.retrobbs.synchro.net>
Date: Wed, 11 Oct 2017 16:51:49 +0000
X-Comment-To: rocksolid.shared.offtopic
Path: retrobbs.novabbs.com!rocksolid2!retrobbs.synchro.net!retrobbs2!.POSTED!not-for-mail
Organization: RetroBBS II
Newsgroups: rocksolid.shared.offtopic
Reply-To: Anonymous <root@192.168.0.42>
X-FTN-PID: Synchronet 3.17a-Linux Jun 15 2017 GCC 4.9.2
Lines: 25
NNTP-Posting-Host: retrobbs2
Mime-Version: 1.0
Content-Type: Multipart/Mixed;boundary="c7fab2521ed51841fee4f54d377cc923"
Content-Transfer-Encoding: 8bit
X-Trace: retrobbs2.retrobbs.synchro.net 1507740709 8197 192.168.0.220 (11 Oct 2017 16:51:49 GMT)
X-Complaints-To: usenet@retrobbs2.retrobbs.synchro.net
NNTP-Posting-Date: Wed, 11 Oct 2017 16:51:49 +0000 (UTC)
User-Agent: FUDforum 3.0.7
X-FUDforum: d41d8cd98f00b204e9800998ecf8427e <15575>
View all headers
Bwahahahaha, not only are they stupid enough to open a big
fat security hole, they are also proud of it.

https://sensepost.com/blog/2017/macro-less-code-exec-in-msword/

Mind you, this is code execution from a document without
macros or anything, which all virus scanners see as a clean
file.
Works on Excel, too.

So you can hack any box with the Microsoft Office Suite on
it just by dropping a harmless document from anywhere. And
Microsoft _might_ consider a bugfix in the next release.

No more questions, your honor.



1
rocksolid light 0.7.2
clearneti2ptor