MS Office in Wonderland [pdf]

Re:MS Office in Wonderland [pdf] by vxNsr on Friday May 10, 2019 @12:33AM (#19875068)

I guess the moral here is to always open your docx/xlsx files using 7zip and checking the raw xml first.

[ Parent | on HN ]

Re:MS Office in Wonderland [pdf] by mappu on Friday May 10, 2019 @01:23AM (#19875277)

CVE-2018-10115, CVE-2018-5996, CVE-2017-17969, and CVE-2016-2334 in 7-Zip all gave code execution when opening a malformed archive.

[ Parent | on HN ]

Re:MS Office in Wonderland [pdf] by vxNsr on Friday May 10, 2019 @06:21PM (#19882828)

ah... but unless it's a spear-phishing attack they're not gonna guess that I'd first open the archive with 7-zip and thus most likely won't build it with that in mind.

[ Parent | on HN ]