Καλώς ορίσατε στο autoexec.gr - Σύνδεση | Εγγραφή | Βοήθεια
σε Αναζήτηση

Vulnerabilities in Word and Excel Document Parsing

Τελευταία δημοσίευση από το μέλος Blackman στις 08-16-2010, 13:56. Η θεματική ενότητα έχει 3 απαντήσεις.
Ταξινόμηση Δημοσιεύσεων: Προηγούμενο Επόμενο
  •  08-12-2010, 11:39 27178

    Vulnerabilities in Word and Excel Document Parsing

     These vulnerabilities affect: All current versions of Microsoft Office for Windows and Mac (specifically Word and Excel)
     How an attacker exploits them: By enticing you to open maliciously crafted Office documents
     Impact: An attacker can execute code, potentially gaining complete control of your computer
     What to do: Install the appropriate Office patches immediately

    Today, Microsoft released two security bulletins describing five vulnerabilities found in components or programs that ship with Microsoft Office for Windows and Mac. Some of the vulnerabilities also affect Word Viewer, the Office Compatibility Packs, and the Open XML File Format Converter for Mac. Each vulnerability affects different versions of Office to a different extent. The five flaws affect different components and applications within Office, but the end result is always the same - by enticing one of your users into downloading and opening a maliciously crafted Office document, an attacker can exploit any of these vulnerabilities to execute code on a victim's computer, usually inheriting that user's level of privileges and permissions. If your user has local administrative privileges, the attacker gains full control of the user's machine.
    According to Microsoft's bulletins, an attacker can exploit these flaws using two types of Office documents: Word (.doc) and Excel (.xls). So beware of all unexpected documents you receive with these file extensions.
    If you'd like to learn more about each individual flaw, drill into the "Vulnerability Details" section of the security bulletins listed below:
     MS10-056: Multiple Word Code Execution Vulnerabilities, rated Critical
     MS10-057: Excel Code Execution Vulnerability, rated Important
    SOLUTION PATH
    Microsoft has released patches for Office to correct all of these vulnerabilities. You should download, test, and deploy the appropriate patches throughout your network immediately.
    Word update for:
     Office XP w/SP3
     Office 2003 w/SP3
     2007 Microsoft Office System w/SP1
     Office 2004 for Mac
     Office 2008 for Mac
     Open XML File Format Converter for Mac
     Microsoft Office Word Viewer
     Microsoft Office Compatibility Pack for Word, Excel, and PowerPoint 2007 File Formats Service Pack 2
     Microsoft Works 9
    Excel update for:
     Office XP w/SP3
     Office 2003 w/SP3
     Office 2004 for Mac
     Office 2008 for Mac
     Open XML File Format Converter for Mac


    Ioannis Zontos
    Network Engineer
    MCP-WCP
    Δημοσίευση κάτω από: ,
  •  08-13-2010, 0:05 27190 σε απάντηση της 27178

    Απ: Vulnerabilities in Word and Excel Document Parsing

    φίλε μου...λίγα λόγια στα ελληνικά εκτός από αυτό που έβαλες θα βοηθούσε πολύ τους συναδέλφους που δεν μιλάνε τόσο καλά το αγγλικό...


    G.K.
    BSc in Business Information Systems,
    MSc in Information Technology Management,
    MCP
  •  08-13-2010, 11:28 27197 σε απάντηση της 27190

    Απ: Vulnerabilities in Word and Excel Document Parsing

    εχεις απο0λυτο δικο φιλε μου , την επομενη θα ειναι στα ελληνικα ,
    Υ.Γ τι εκανες με το error ston exchange kai cisco ?
    Ioannis Zontos
    Network Engineer
    MCP-WCP
  •  08-16-2010, 13:56 27224 σε απάντηση της 27197

    Απ: Vulnerabilities in Word and Excel Document Parsing

    το έκανα όπως το είχα βρει και συμφωνίσατε και οι υπόλοιποι...από εκεί και πέρα δεν έχω αντιμετοπίσει κάτι άλλο εκτός ενός μυνήματος που προφανώς είναι άσχετο με το δικό μου σύστημα, καθώς όταν το googlara μου έβγαζε για linuxοειδές τύπο λάθους...

    έχω και σχετικό thread το οποίο δεν απαντήθηκε ποτέ
    G.K.
    BSc in Business Information Systems,
    MSc in Information Technology Management,
    MCP
Προβολή Τροφοδοσίας RSS με μορφή XML
Με χρήση του Community Server (Personal Edition), από την Telligent Systems