+- Hack Forums (https://hackforums.net)
+-- Forum: Hacks, Exploits, and Various Discussions (https://hackforums.net/forumdisplay.php?fid=45)
+--- Forum: Blackhat • Red Team • Offensive Security (https://hackforums.net/forumdisplay.php?fid=447)
+---- Forum: Keyloggers (https://hackforums.net/forumdisplay.php?fid=113)
+---- Thread: [NOTICE] Microsoft Critical Vulnerabilities that You Must Patch Coming Tuesday (/showthread.php?tid=4157730)
[NOTICE] Microsoft Critical Vulnerabilities that You Must Patch Coming Tuesday - Null Byte - Apr 6, 2014
Hey HF,
Just here to give you a heads up that Microsoft has scheduled to release a few critical patches this coming Tuesday, along with the final patches to Windows XP before its final drop of support. It is essential that you update your OS as soon as these are released.
These patches will fix:
- Remote code execution vulnerability in Microsoft Word 2010 (CVE-2014-1761)
- Web-based attacks using RTF vulnerability
- Local filesystem RTF vulnerability
- Internet Explorer buffer overflow vulnerability
- Miscellaneous security flaws in the Windows OS
Stay secure, HF 🤝
* - eiqhtz - Apr 6, 2014
The Microsoft Word 2012 patch, is it the one that fixes the .doc exploits and what not?
I'm hoping that'll get fixed.
* - Aura - Apr 6, 2014
(Apr 6, 2014 10:26 PM)Malwarę Bytes Wrote: The Microsoft Word 2012 patch, is it the one that fixes the .doc exploits and what not?
I'm hoping that'll get fixed.
I guess it's to fix this exploit :
https://hackforums.net/showthread.php?tid=4139289
Also, I thought that Word 2010 wasn't touched by that exploit ?
* - Null Byte - Apr 6, 2014
@Everyone: I believe that all MS Word exploits in the wild are getting patched. That will hurt a few HF shops.
* - eiqhtz - Apr 7, 2014
I guess that'll be good for the white hats, lol.
Bad for the HF shops, etc.
Quote:Microsoft has released a security advisory for Microsoft Word. A vulnerability exists for remote code execution which could allow an attacker to gain user rights by opening a specifically crafted Rich Text Format file.
Applying the Microsoft Fix it solution will disable the opening of RTF content in Microsoft Word, preventing the exploitation of this vulnerability.
US-CERT recommends that users and administrators review Microsoft Security Advisory 2953095 and apply any necessary updates to help mitigate the risk.
Read this from US-Cert. Guessing it has to do with your post.
* - Novo - Apr 7, 2014
This is some good news for the white-hats out there. Will be a blow for the black-hat hackers.