Microsoft Security Advisory (2501696): Vulnerability in MHTML Could Allow Information Disclosure - 3


 
Thread Tools Search this Thread
Special Forums Windows & DOS: Issues & Discussions Security Advisories (RSS) - Microsoft Microsoft Security Advisory (2501696): Vulnerability in MHTML Could Allow Information Disclosure - 3
# 1  
Old 03-11-2011
Microsoft Security Advisory (2501696): Vulnerability in MHTML Could Allow Information Disclosure - 3

Revision Note: V1.1 (March 11, 2011): Revised Executive Summary to reflect investigation of limited, targeted attacks. Advisory Summary:Microsoft is investigating new public reports of a vulnerability in all supported editions of Microsoft Windows. The vulnerability could allow an attacker to cause a victim to run malicious scripts when visiting various Web sites, resulting in information disclosure. This impact is similar to server-side cross-site scripting (XSS) vulnerabilities. Microsoft is aware of published information and proof-of-concept code that attempts to exploit this vulnerability. In addition, at this time, Microsoft is aware of public proof-of-concept code being used in limited, targeted attacks. Users who have applied the automated Microsoft Fix it solution described in Microsoft Knowledge Base Article 2501696 or manually applied the "Enable the MHTML protocol lockdown" workaround described in this advisory to their systems are not exposed to this vulnerability.

More...
Login or Register to Ask a Question

Previous Thread | Next Thread
Login or Register to Ask a Question
ooconvert(1)							   User Commands						      ooconvert(1)

Name
       ooconvert - Commandline Document Converter Using OpenOffice.org

SYNOPSIS
ooconvert [--help] [--force] input output DESCRIPTION
This tool converts documents between various formats on the commandline. It uses OpenOffice.org that guarantees the quality of available import and export filters. This tool tries to start OpenOffice.org in the server mode on backgroud. It does not work if the OpenOffice.org application has already been running. Also it slows down the conversion a lot. We hope to reduce these limitations in the further versions. OPTIONS
input Input file. The filename suffix must be one of the currently supported file formats, see below. output Output file. The filename suffix defines the output file format. It must be one from the table below. An existing file can be over- written by the --force option. --help Print help and exit. --force Force an already existing output file to be replaced. SUPPORTED FILE FORMATS
The current version of this tool does not read the list of available input and output filters directly from OpenOffice.org. The list of supported file formats is hardcoded and thus limited to: doc Microsoft Word 97/2000/XP docx MS Word 2007 XML dot Microsoft Word 97/2000/XP Template dotx MS Word 2007 XML Template html HyperText Markup Language (Web Page) odt ODF Text Document ods ODF Spreadsheet odp ODF Presentation ott ODF Text Document Template ots ODF Spreadsheet Template otp ODF Presentation Template pdf Portable Document Format ppt Microsoft PowerPoint 97/2000/XP pptx Microsoft PowerPoint 2007 XML pot Microsoft PowerPoint 97/2000/XP Template potx Microsoft PowerPoint 2007 XML Template rtf Rich Text Format stc OpenOffice.org 1.0 Spreadsheet Template sti OpenOffice.org 1.0 Presentation Template stw OpenOffice.org 1.0 Text Document Template sxc OpenOffice.org 1.0 Spreadsheet sxi OpenOffice.org 1.0 Presentation sxw OpenOffice.org 1.0 Text Document swf Macromedia Flash txt Plain Text xls Microsoft Excel 97/2000/XP xlsx Microsoft Excel 2007 XML xlt Microsoft Excel 97/2000/XP Template xltx Microsoft Excel 2007 XML Template TROUBLESHOOTING PROBLEMS
See http://en.opensuse.org/Bugs:OOo for more details about how to report bugs in OpenOffice.org. AUTHOR
This manual page was created by Petr Mladek <petr.mladek@novell.com>. OpenOffice.org Converter 2009-02-09 ooconvert(1)