S-174: Vulnerability in OLE Automation


 
Thread Tools Search this Thread
Special Forums Cybersecurity Security Advisories (RSS) S-174: Vulnerability in OLE Automation
# 1  
Old 02-12-2008
S-174: Vulnerability in OLE Automation

A remote code execution vulnerability exists in Object Linking and Embedding (OLE) Automation that could allow an attacker who successfully exploited this vulnerability to make changes to the system with the permissions of the logged-on user. The risk is MEDIUM. If a user is logged on with administrative user rights, an attacker could take complete control of the affected system. An attacker could then install programs; view, change, or delete data; or create new accounts with full user rights. Users whose accounts are configured to have fewer user rights on the system could be less impacted than users who operate with administrative user rights.


More...
Login or Register to Ask a Question

Previous Thread | Next Thread

7 More Discussions You Might Find Interesting

1. Shell Programming and Scripting

Perl syntax and html ole parsing

Hi gurus I am trying to understand some advanced (for me) perl constructions (syntax) following this tutorial I am trying to parse html: Using Mojo::DOM | Joel Berger say "div days:"; say $_->text for $dom->find('div.days')->each; say "\nspan hours:"; say $_->text for... (1 Reply)
Discussion started by: wakatana
1 Replies

2. Shell Programming and Scripting

win32 ole in deepr details in perl

Hello Gurus, I am begginer in perl. I would like to ask several questions, some related to perl and its syntax but most will be regarding to WIN32 OLE. My main goal is to develop script that will check word document structure (return some information) and make some changes in this document (if it... (0 Replies)
Discussion started by: wakatana
0 Replies

3. Shell Programming and Scripting

Details about WIN32::OLE

Hi all, Is win32::OLE module is applicable in linux system??? from my understanding it is not possible..because we have to use some tools for that..for more info refer this website http://oclug.on.ca/archives/oclug/2001-July/008100.html (1 Reply)
Discussion started by: kavi.mogu
1 Replies

4. Shell Programming and Scripting

PERL Win32::OLE Inserting Picture in Excel

I am trying to insert a picture into a worksheet in Excel using Perl the following is the code use Win32::OLE; use Win32::OLE::Const "Microsoft Excel"; use Win32::OLE qw(in with); # Initiate Excel application $Excel = Win32::OLE->new('Excel.Application', 'Quit'); $Excel->{Visible} =1; #... (1 Reply)
Discussion started by: cold_Que
1 Replies

5. Shell Programming and Scripting

MS Outlook + Win32::OLE

Hey guys, I'm trying to go through my emails in Outlook until I find an email with a certain subject line. I am able to send emails with no problem, but reading emails and their properties (From, Subject, etc.) is my main problem. Basically, I don't know where to start and using search engines... (2 Replies)
Discussion started by: kooshi
2 Replies

6. Shell Programming and Scripting

OLE ERROR in perl

Hello All, I have executed one script where i am getting this error,what may be the reason..... please help me out. OLE exception from Microsoft Excel Win32::OLE(0.1403) error 0x800a03ec in METHOD/PROPERTYGET "open" (1 Reply)
Discussion started by: suvenduperl
1 Replies

7. Shell Programming and Scripting

Spell Check in MS Word using PERL OLE

Hi, I am trying automate couting number of spell and typo errors in MS Word document using perl script. In perl script, i am using Win32::OLE module of perl to read MS word document. Can anybody tell me are there any modules available in perl which can be imported into my script to... (0 Replies)
Discussion started by: 123an
0 Replies
Login or Register to Ask a Question
VSDUMP(1)						      General Commands Manual							 VSDUMP(1)

NAME
vsdump - VSD/VSS file format reverse engineering SYNOPSIS
vsdump [SUBOPTIONS] FILE DESCRIPTION
This manual page documents briefly the vsdump command. vsdump is an ALT Linux (www.altlinux.ru) project of VSD/VSS file format reverse engineering. VSD/VSS is an OLE file. Main data is stored in 'VisioDocument' file inside this OLE. 'VisioDocument' file has a header with version number and pointer to the 1st stream. Pointers contain Type, Offset to the start, Length, and Format of stream. The Format field has a 'compressed' flag (the 2nd least significant bit). Format == 0x4* is used for streams that contains some strings. Format == 0x5* is used for streams that contains some pointers. Format == 0xd* is used for streams made of chunks. Type == 15 is used for streams that contains 'Page' data. Type == 23 is used for streams that contains Icons. And so on. To (de)compress some streams Visio uses some version of LZW algorithmwith options different from other MS-Office applications. Those streams are made of chunks. Chunks starts with header that contains Type and Length fields. Most of chunk types has a mandatory fields and some of them has a discretionary fields. The type of chunk imply an order and format of mandatory fields and place of start for discretionary fields (if any). The discrepionary fields made of 'blocks'. Blocks start with length, type fields and index of variable it is linked to. Blocks made of 'slices'. Every slice can be single byte operation like "+" or "*" or 'command' to put one/two bytes data or IEEE-754 frac- tion or stringor name or function into formula. SUBOPTIONS
A summary of options is included below. help list subcommands dump <file> [directory] dump pointers and inflated streams test <file> test command table AUTHOR
vsdump was written by Valek Filippov (frob@df.ru) This manual page was written by Juan Angulo Moreno <juan@apuntale.com>, for the Debian project (but may be used by others). jun 26, 2007 VSDUMP(1)