full-disclosure - Vulnerable function in newest PowerPoint case (MS Advisory #925984)

lists.openwall.net		lists / announce owl-users owl-dev john-users john-dev passwdqc-users yescrypt popa3d-users / oss-security kernel-hardening musl sabotage tlsify passwords / crypt-dev xvendor / Bugtraq Full-Disclosure linux-kernel linux-netdev linux-ext4 linux-hardening linux-cve-announce PHC
Open Source and information security mailing list archives

Hash Suite: Windows password security audit tool. GUI, reports in PDF.

[<prev] [next>] [day] [month] [year] [list]

Message-ID: <4035205.1527611160091094605.JavaMail.juha-matti.laurio@netti.fi>
Date: Fri, 6 Oct 2006 02:31:33 +0300 (EEST)
From: Juha-Matti Laurio <juha-matti.laurio@...ti.fi>
To: bugtraq@...urityfocus.com, full-disclosure@...ts.grok.org.uk
Subject: Vulnerable function in newest PowerPoint case (MS
	Advisory #925984)

This PowerPoint vulnerability is described at Microsoft Security Advisory #925984
http://www.microsoft.com/technet/security/advisory/925984.mspx

It appears that the vulnerability is due to errors when executing VB script
SlideShowWindows.View.GotoNamedShow () automatically inside a PowerPoint presentation.

Information about the existence of related exploit code listed as NamedShows stack overwrite issue is public too.
The author and origin of the exploit code is not currently known.

Microsoft is reportedly working on a fix and Security Bulletin Advance Notification Program
reported about four upcoming October security bulletins affecting Microsoft Office recently.

- Juha-Matti

_______________________________________________
Full-Disclosure - We believe in it.
Charter: http://lists.grok.org.uk/full-disclosure-charter.html
Hosted and sponsored by Secunia - http://secunia.com/