full-disclosure - Excel 0-day?

lists.openwall.net		lists / announce owl-users owl-dev john-users john-dev passwdqc-users yescrypt popa3d-users / oss-security kernel-hardening musl sabotage tlsify passwords / crypt-dev xvendor / Bugtraq Full-Disclosure linux-kernel linux-netdev linux-ext4 linux-hardening linux-cve-announce PHC
Open Source and information security mailing list archives

Hash Suite: Windows password security audit tool. GUI, reports in PDF.

[<prev] [next>] [<thread-prev] [thread-next>] [day] [month] [year] [list]

Message-ID: <449547A3.50508@syneticon.de>
Date: Sun Jun 18 13:31:58 2006
From: seclists at syneticon.de (Denis Jedig)
Subject: Excel 0-day?

Paul Szabo wrote:

> Ideas (PoC, workaround) anyone?

As often, the information policy is more than unfortunate. No details
are given, the administrators are just advised to "update antivirus",
hole up in some dark corner and chew on a piece of blanket out of fear.
It's the same kind of ignorance regarding customer needs we have seen in
the case of the WMF vulnerability.

Anybody any idea if the problem somehow relates to the Excel
vulnerability offered on eBay in Dec 05?
http://www.securityfocus.com/news/11363

Regards,

Denis