OSEC

Neohapsis is currently accepting applications for employment. For more information, please visit our website www.neohapsis.com or email hr@neohapsis.com
 
Microsoft Word Protection Bypass

From: Thorsten Delbrouck-Konetzko (Thorsten.Delbrouckguardeonic.com)
Date: Fri Jan 02 2004 - 04:51:03 CST


Hi all,

Microsoft Word provides an option to protect "forms" by password. This is
used to ensure that unauthorized users cannot manipulate the contents of
documents except within specially designed "form" areas. This feature is
also often used to protect documents which do not even have form areas
(quotations/offers etc.).

This form protection can easily be removed without any additional tools
(apart from a hex-editor).

Please find the full advisory attached.

best regards,
/tdk

--
 Thorsten Delbrouck
 Chief Information Officer

 Guardeonic Solutions AG
 Rosenheimer Str. 116
 D-81669 Munich
---------------------------------