full-disclosure - Major updates to Excel 0-day Vulnerability FAQ at SecuriTeam Blogs

lists.openwall.net		lists / announce owl-users owl-dev john-users john-dev passwdqc-users yescrypt popa3d-users / oss-security kernel-hardening musl sabotage tlsify passwords / crypt-dev xvendor / Bugtraq Full-Disclosure linux-kernel linux-netdev linux-ext4 linux-hardening linux-cve-announce PHC
Open Source and information security mailing list archives

Hash Suite: Windows password security audit tool. GUI, reports in PDF.

[<prev] [next>] [day] [month] [year] [list]

Date: Fri Jul  7 03:22:39 2006
From: juha-matti.laurio at netti.fi (Juha-Matti Laurio)
Subject: Major updates to Excel 0-day Vulnerability FAQ at
	SecuriTeam Blogs

Several updates to First Microsoft Excel 0-day Vulnerability FAQ document at
http://blogs.securiteam.com/?p=451
has been done.

* Several exploits for this vuln and other Excel issues has been released recently

* PoC sample file Nanika.xls was posted to Bugtraq on Monday already
(NOTE: Several vendors see this as a separate vulnerability)

* New Trojan variant names added to the document

* Some other updates and fixes

Word ?First? to the FAQ document title was added in June to clarify the situation after several Excel vuln disclosures.

At time of writing new 'Nanika' issue uses Repair Mode too (and user interaction is needed).
There is no exact information is this a totally new type vulnerability, however.

- Juha-Matti