Exploit code targets Microsoft flaw

Exploit code targets Microsoft flaw

Daniel Fleshbourne via vnunet on 18 February 2008 - 16:12 · 7 comments & 5955 views

Advertisement (Why?)

A security researcher has posted code for an exploit targeting a component of Microsoft Office. The vulnerability lies in a conversion tool used to convert Microsoft Works WPS files into Word RTF files The flaw could allow an attacker to remotely execute code on a user's system. Microsoft repaired the vulnerability as part of its monthly security release on 12 February. When the update was released Microsoft credited discovery of the flaw to iDefense, which in turn credited security researcher Damian Put.

About the Author

Full name: Daniel Fleshbourne
User name: Daniel
Contact: via forum PM
Submissions: View All
More: View Bio New!

Post a comment · Send to friend Comments · There are 7 additional comments

(2 replies) #1 ahhell on 18 Feb 2008 - 17:32

So? The flaw was already patched...how is this news?

#1.1 +Chrono951 on 18 Feb 2008 - 18:30

Exactly, why are we hearing about flaws that have already been patched?

#1.2 whocares78 on 19 Feb 2008 - 03:30

+1

can you not waste my time readin articlesa bout patched flaws

#2 night_stalker_z on 18 Feb 2008 - 17:41

Hows this news? Most exploits are targetted at Microsoft.

#3 JamesNL on 18 Feb 2008 - 22:16

This article is written poorly, it's very short and doesn't provide background info. Looks like a copy paste from a PDF...

(1 reply) #4 Kushan on 18 Feb 2008 - 23:58

Sweet Jesus, Daniel, can you for once post an article that's more than 2 paragraphs, relevant, worthwhile and actually has SOURCES for it?

#4.1 GreyWulf99 on 19 Feb 2008 - 00:42

They still usually have sources, just been doing a bit differently lately for some articles at least. For example, with this article, instead of listing the source at the bottom of the post, theres this above it: "Posted by Daniel Fleshbourne via vnunet 8 hours ago". The link to vnunet is the source and has a bit more substance.

Commenting has either been disabled on this article or you are not logged in. Click here to login or register, its free!

Note: Anonymous commenting is disabled in order to keep the quality of responses to a high standard.

Advertisement (Why?)

Neowin.net

Exploit code targets Microsoft flaw

Share this Article

About the Author

Related news