full-disclosure - Office 2000 Vulnerability

lists.openwall.net		lists / announce owl-users owl-dev john-users john-dev passwdqc-users yescrypt popa3d-users / oss-security kernel-hardening musl sabotage tlsify passwords / crypt-dev xvendor / Bugtraq Full-Disclosure linux-kernel linux-netdev linux-ext4 linux-hardening linux-cve-announce PHC
Open Source and information security mailing list archives

Hash Suite: Windows password security audit tool. GUI, reports in PDF.

[<prev] [next>] [<thread-prev] [thread-next>] [day] [month] [year] [list]

Message-ID: <3F5FCC02.14690.D28C468@localhost>
From: nick at virus-l.demon.co.uk (Nick FitzGerald)
Subject: Office 2000 Vulnerability

"Michael De La Cruz" <delacruzma@....com> wrote:

>      Do any of you have some information on the latest MS Office 
> vulnerability?  I just read that an exploit has been released.  ...

Well, some PoC exploit details were available in some of the discoverer 
advisories and there was a "broken WP document file" generator posted 
to this list (or Bugtraq -- I forget) a day or two back.

> ...  I guess this 
> means network administrators have a small window of time to start patching 
> up systems before a virus is released.  Does anyone know of a work around 
> when updating Office 2000 with an update?  It asks for the original CD that 
> Office was installed from.  Any thoughts?

Go get the CD from the software safe??


Regards,

Nick FitzGerald