Code execution via Microsoft Office XP updated since 01.04.2002
Published:		28.05.2002
Source:		BUGTRAQ
SecurityVulns ID:		1901
Type:		local
Level:		5/10
Description:		It's possible to include scripting object which fill be activated in case user reply or forward e-mail message. Host method of spreadsheet object allows creation and execution of arbitrary files.

Affected:		MICROSOFT : Office 2000
		MICROSOFT : Outlook 2000
		MICROSOFT : Outlook 2002
		MICROSOFT : Office XP

Original document		Georgi Guninski, Excel XP xml stylesheet problems (28.05.2002)
		SECURITEAM, [NT] Excel XP XML Stylesheet Security Problem (27.05.2002)
		Georgi Guninski, More Office XP problems (version 3.0) (29.04.2002)
		MICROSOFT, Security Bulletin MS02-021: E-mail Editor Flaw Could Lead to Script Execution on Reply or Forward (Q321804) (26.04.2002)
		Georgi Guninski, More Office XP problems (Version 2.0) (04.04.2002)
		Georgi Guninski, More Office XP problems (01.04.2002)

Discuss:

Read or add your comments to this news (0 comments)