Computer Security

Forum
back  news / advisories / forum / software / advertising / search / exploits  forward
[EN] securityvulns.ru
no-pyccku



Очередная уязвимость IE при работе с объектами Office
updated since 28.06.2000
Published:15.07.2000
Source:BUGTRAQ
SecurityVulns ID:308
Type:client
Level:6/10
Описание:Создавая ActiveX-объекты для файлов .xla, .ppt, .mdb можно получить доступ к методу SaveAs, сохранить любой файл локально и запустить его на выполнение.
Affected:MICROSOFT : Excel 2000
 MICROSOFT : Internet Explorer 5.01
 MICROSOFT : Internet Explorer 5.0
 MICROSOFT : Office 2000
 MICROSOFT : Internet Explorer 4.01
 MICROSOFT : Internet Explorer 5.5
 MICROSOFT : Power Point 2000
 MICROSOFT : Power Point 97
 MICROSOFT : Office 97
Original documentdocumentMICROSOFT, Security Bulletin (MS00-049) (15.07.2000)
 documentGeorgi Guninski, IE 5 and Access 2000 vulnerability - executing programs (28.06.2000)
 documentGeorgi Guninski, IE 5 and Excel 2000, PowerPoint 2000 vulnerability - executing programs (28.06.2000)
 documentGeorgi Guninski, IE 5 and Excel 2000, PowerPoint 2000 vulnerability - executing programs (28.06.2000)
Discuss:Read or add your comments to this news (0 comments)

Show Threads
Messages
 
Login:* (Register)
Password:*
(private) To:
(reply) Subject:*
Text:

Main Forum (Eng)

General security questions not appropriate for another forums. 		3proxy Forum (Eng)

All 3proxy question must be posted to this forum. 		Bugs, Vulnerabilities, PoCs and Exploits (Eng)

All vulnerability related questions, vulnerability digging and exploit creation. 		Windows programming and administration (Eng)

Administering Windows and application development. 		Unix programming and administation (Eng)

Administering Unix and application development. 		Test forum

Please post all test messages here. All test messages from different forums will be deteted.
Main Forum (Rus)
 3proxy Forum (Rus)
 Bugs, Vulnerabilities, PoCs and Exploits (Rus)
 Windows programming and administration (Rus)
 Unix programming and administation (Rus)
About | Terms of use | Privacy Policy
© SecurityVulns, 3APA3A, Vladimir Dubrovin
Nizhny Novgorod

 
 


Rating@Mail.ru