OSEC

Neohapsis is currently accepting applications for employment. For more information, please visit our website www.neohapsis.com or email hr@neohapsis.com
 
Subject: Re: Stake Advisory: Microsoft Office 2000 ClipArt Vulnerablity
From: Dustin Miller (dmillerWFDEVELOPMENT.COM)
Date: Tue Mar 07 2000 - 20:56:28 CST


This bug does not seem to affect Windows Millennium Edition Build 2476,
oddly enough. I do have Office 2000 Professional installed (retail
version), and CAG alarms with an error, but no key was created.

-----Original Message-----
<SNIP>
        Advisory Name: ClipArt Gallery Overflow
    Advisory Released: 03/06/00
          Application: Microsoft Office 2000
             Severity: An attacker can seize control of a Windows 95, 98,NT,
                       or 2000 machine via any HTML source, including
                       Microsoft Outlook e-mail.
               Status: Vendor patch available, workaround available
               Author: dildogl0pht.com
                  WWW: http://www.l0pht.com/advisories.html

</SNIP>