OSEC

Neohapsis is currently accepting applications for employment. For more information, please visit our website www.neohapsis.com or email hr@neohapsis.com
 
Subject: Re: MS Word and MS Access vulnerability - executing arbitrary programs, may be exploited by IE/Outlook
From: David LeBlanc (dleblancMINDSPRING.COM)
Date: Sat Aug 12 2000 - 12:06:58 CDT

At 05:04 PM 8/10/00 -0700, Ben Greenbaum wrote:
>"This may be exploited also by visiting a web page with IE or
>opening/previewing HTML email message with Outlook."

>While this sentence is accurate, it is misleading as this vulnerability
>can be exploited via any delivery mechanism at all, including Netscape
>Navigator, Netscape Messenger, ftp etc. As long as the file is delivered
>and opened in a vulnerable version of Word/Access, it works.

It is also a good thing to note that either the Word file and the Access
database both have to be delivered at once, or the victim has to be able to
open the Access file in some manner. For example, posting an Access file to
some SMB share located on the internet, and then delivering the Word file
to a user behind a properly configured firewall (i.e., outbound SMB
connections are blocked) would not allow the exploit to fire.

David LeBlanc
dleblancmindspring.com