Browse by Tags

Symantec Security Response Weblog: MS Word Exploit Creation Tool

MS Word Exploit Creation Tool In these days of “zero-day”, I’ve analyzed many malicious files exploiting some of the recent MS Office vulnerabilities for Word, Excel and PowerPoint. The "Trojan.Mdropper" and “Trojan.PPDropper” families have grown very quickly in the last year, and I was trying to come...

Posted to Chris Mosby at myITforum.com (Weblog) by cmosby on 04-05-2007
Filed under: Security and Anti-Virus, Patch Management, AntiVirus Information, Microsoft Office, Internet Hacks
McAfee Avert Labs Blog - PowerPoint Version of (just patched) Office Zero-Day Spotted

PowerPoint Version of (just patched) Office Zero-Day Spotted Tuesday February 13, 2007 at 9:08 pm CST Posted by Craig Schmugar Trackback Earlier today Symantec posted a description for Trojan.PPDropper.G . The vulnerability mentioned in the description has been assigned CVE-2007-0913 . SANS added it...

Posted to Chris Mosby at myITforum.com (Weblog) by cmosby on 02-14-2007
Filed under: Security and Anti-Virus, Patch Management, AntiVirus Information, Microsoft Office, Internet Hacks
SANS Internet Storm Center - The missing Microsoft patches: Updated Feb 2007

The missing Microsoft patches Published: 2007-01-05, Last Updated: 2007-02-14 00:53:51 UTC by Swa Frantzen (Version: 23) Vulnerabilities that are widely known and/or actively exploited are of great interest to our readers, here we try to keep an overview of them Affected Known Exploits Impact Known since...

Posted to Chris Mosby at myITforum.com (Weblog) by cmosby on 02-14-2007
Filed under: Security and Anti-Virus, Patch Management, Microsoft Windows, AntiVirus Information, Internet Explorer, Microsoft Office
McAfee Avert Labs Blog -Exploit Targeting Unpatched Word Vulnerability Spotted

Exploit Targeting Unpatched Word Vulnerability Spotted Friday February 9, 2007 at 12:28 pm CST Posted by Craig Schmugar Trackback On the heels of my Zero-Day Excels Over Word blog, McAfee Avert Labs is currently investigating a new Word exploit. Preliminary analysis shows that this is a different issue...

Posted to Chris Mosby at myITforum.com (Weblog) by cmosby on 02-12-2007
Filed under: Security and Anti-Virus, Patch Management, AntiVirus Information, Microsoft Office, Internet Hacks
McAfee Avert Labs Blog - Bot Countermeasures

Bot Countermeasures Wednesday February 7, 2007 at 6:32 am CST Posted by Vinoo Thomas Trackback Malware authors have been at the cutting edge of incorporating exploit code into their creations for zero day vulnerabilities. Fueled by financial incentives and readily available source code, the bad guys...

Posted to Chris Mosby at myITforum.com (Weblog) by cmosby on 02-07-2007
Filed under: SMS, Security and Anti-Virus, Patch Management, Microsoft Windows, AntiVirus Information, Microsoft Office, Internet Hacks
McAfee Avert Labs Blog -Zero-Day Excels Over Word

Zero-Day Excels Over Word Friday February 2, 2007 at 1:50 pm CST Posted by Craig Schmugar Trackback There have been numerous stories recently covering unpatched Microsoft Word vulnerabilities. For reference, the CVE designations for these vulnerabilities are: CVE-2006-5994 CVE-2006-6456 CVE-2006-6561...

Posted to Chris Mosby at myITforum.com (Weblog) by cmosby on 02-06-2007
Filed under: Security and Anti-Virus, AntiVirus Information, Microsoft Office
Symantec Security Response Weblog: New Microsoft Word 2000 Vulnerability

New Microsoft Word 2000 Vulnerability We’ve seen many threats using vulnerabilities based on Microsoft Office documents over the last year, so it’s no surprise that we have recently observed new samples of a threat that follows the same theme. This threat named Trojan.Mdropper.W is using...

Posted to Chris Mosby at myITforum.com (Weblog) by cmosby on 01-25-2007
Filed under: Security and Anti-Virus, AntiVirus Information, Microsoft Office
Microsoft Word's third strike this week.

Looks like there are reports out there of yet another Word vulnerability had its Proof of Concept (POC) code released last night. From what I have read, this does require user interaction to exploit and will run under the rights of the user. Looks like Santa skipped one of my presents, a stress free...

Posted to Chris Mosby at myITforum.com (Weblog) by cmosby on 12-14-2006
Filed under: Security and Anti-Virus, Patch Management, AntiVirus Information, Microsoft Office
Trend Micro Malware Blog - MS Word, another 0-day for the month

MS Word, another 0-day for the month. posted by: Roberto Tayag, 12/12/2006 Another 0-day exploit is currently being investigated by Microsoft, last week we reported about a previous MS Word 0-day . Yesterday, a couple of reports emerged about a new 0-day and according to the MSRC blog this new claim...

Posted to Chris Mosby at myITforum.com (Weblog) by cmosby on 12-12-2006
Filed under: Security and Anti-Virus, Patch Management, AntiVirus Information, Microsoft Office
McAfee Avert Labs Blog - Exploit-MSWord.b: Is that another Word for 0-day vulnerability ?

Exploit-MSWord.b: Is that another Word for 0-day vulnerability ? Monday December 11, 2006 at 3:06 am CST Posted by Geok Meng Ong Trackback Last Wednesday, Microsoft posted an advisory for a targeted “zero-day” attack using a Microsoft Word vulnerability, and until we get a CVE number, we...

Posted to Chris Mosby at myITforum.com (Weblog) by cmosby on 12-11-2006
Filed under: Security and Anti-Virus, Patch Management, AntiVirus Information, Microsoft Office

Page 1 of 2 (11 items) 1 2 Next >