Rocksolid Light - rocksolid.shared.offtopic - Automatic execution of code in Word is a feature, says Microsoft_

Automatic execution of code in Word is a feature, says Microsoft__

<orli75$805$1@retrobbs2.retrobbs.synchro.net>

https://news.novabbs.org/interests/article-flat.php?id=409&group=rocksolid.shared.offtopic#409

copy link Newsgroups: rocksolid.shared.offtopic

From: root@192.168.0.42 (Anonymous)
To: rocksolid.shared.offtopic
Subject: Automatic execution of code in Word is a feature, says Microsoft__
Message-ID: <orli75$805$1@retrobbs2.retrobbs.synchro.net>
Date: Wed, 11 Oct 2017 16:51:49 +0000
X-Comment-To: rocksolid.shared.offtopic
Path: retrobbs.novabbs.com!rocksolid2!retrobbs.synchro.net!retrobbs2!.POSTED!not-for-mail
Organization: RetroBBS II
Newsgroups: rocksolid.shared.offtopic
Reply-To: Anonymous <root@192.168.0.42>
X-FTN-PID: Synchronet 3.17a-Linux Jun 15 2017 GCC 4.9.2
Lines: 25
NNTP-Posting-Host: retrobbs2
Mime-Version: 1.0
Content-Type: Multipart/Mixed;boundary="c7fab2521ed51841fee4f54d377cc923"
Content-Transfer-Encoding: 8bit
X-Trace: retrobbs2.retrobbs.synchro.net 1507740709 8197 192.168.0.220 (11 Oct 2017 16:51:49 GMT)
X-Complaints-To: usenet@retrobbs2.retrobbs.synchro.net
NNTP-Posting-Date: Wed, 11 Oct 2017 16:51:49 +0000 (UTC)
User-Agent: FUDforum 3.0.7
X-FUDforum: d41d8cd98f00b204e9800998ecf8427e <15575>

by: Anonymous - Wed, 11 Oct 2017 16:51 UTC

Bwahahahaha, not only are they stupid enough to open a big
fat security hole, they are also proud of it.

https://sensepost.com/blog/2017/macro-less-code-exec-in-msword/

Mind you, this is code execution from a document without
macros or anything, which all virus scanners see as a clean
file.
Works on Excel, too.

So you can hack any box with the Microsoft Office Suite on
it just by dropping a harmless document from anywhere. And
Microsoft _might_ consider a bugfix in the next release.

No more questions, your honor.

Thank God a million billion times you live in Texas.

interests / Offtopic / Automatic execution of code in Word is a feature, says Microsoft__

Subject	Author
Automatic execution of code in Word is a feature, says Microsoft__	Anonymous