Home Upgrade Search Memberlist Extras Hacker Tools Award Goals Help Wiki Contact

|| ALERT || MICROSOFT WORD REMOTE CODE EXPLOIT ||



[img]http://4.bp.blogspot.com/-AJxcFqspKC4/UzEiKzAoYjI/AAAAAAAAaz8/S7TB8r_p5Lg/s728/Microsoft-Word-zero-day-exploit.jpg[/img]

Microsoft warned about a zero-day vulnerability in Microsoft Word that is being actively exploited in targeted attacks and discovered by the Google security team. “At this time, we are aware of limited, targeted attacks directed at Microsoft Word 2010…” company said.

According to Microsoft's security advisory, Microsoft Word is vulnerable to a remote code execution vulnerability (CVE-2014-1761) that can be exploited by a specially crafted Rich Text Format (RTF).
An Attacker can simply infect the victim's system with malware if a user opens a malicious Rich Text Format (RTF), or merely preview the message in Microsoft Outlook.
"The issue is caused when Microsoft Word parses specially crafted RTF-formatted data causing system memory to become corrupted in such a way that an attacker could execute arbitrary code."

Microsoft acknowledged that remote code execution flaw also exists in Microsoft Word 2003, 2007, 2013, Word Viewer and Office for Mac 2011.
Microsoft is working on an official patch, which will be released with the next Patch Tuesday security updates on April 8.

But in the meantime, Windows users can use temporary 'Fix It' tool to patch this vulnerability and also can install Enhanced Mitigation Experience Toolkit (EMET) tool that can mitigate this vulnerability.
Do not download .RTF files from the suspicious websites, and do not open or preview .RTF email attachments from strangers.

Sauce

🤝

These exploits are always being developed and patched quickly so not much to worry about in the long run, just a simple warning to users!
[Image: M7tJcZL.gif]
What a fantastic warning computer security message. Remote code execution is a popular exploitation method.

Thanks for the heads up Jagster!!
Not a problem! I am always on the look out for these exploits being announced! I know they are always around and they usually become patched very quickly once released.
[Image: M7tJcZL.gif]
Uh-oh, guess I'll have to download that Fix-It on my laptop who's running Office 2010. Good thing I'm running Office 2013 on my main computer 😝
Fiat justitia ruat cælum

My era of providing technical support and malware removal on HackForums is over, so you can stop PM'ing me about it. Sorry.
People will attempt anything to infect these days, thanks for the heads up!
No problem! Always try to spread the warnings out, people easily accept .rtf files thinking they are safe.
[Image: M7tJcZL.gif]
OpenOffice FTW. Good community alert though, THN <3
(Mar 28, 2014 06:03 PM)Null Byte Wrote:  OpenOffice FTW. Good community alert though, THN <3

I can't stand OpenOffice at all. I tried for a year to live with it, I can't. When you've grown up with WordPerfect and Word, you just can't move on like that, haha !
Fiat justitia ruat cælum

My era of providing technical support and malware removal on HackForums is over, so you can stop PM'ing me about it. Sorry.
(Mar 28, 2014 07:25 PM)Aura Wrote:  I can't stand OpenOffice at all. I tried for a year to live with it, I can't. When you've grown up with WordPerfect and Word, you just can't move on like that, haha !

I'm too poor to get Word and I really disagree with piracy in general, so I'm stuck here with OpenOffice 🤗
Thanks for the share, will really help out xD
(Mar 28, 2014 09:29 PM)Null Byte Wrote:  I'm too poor to get Word and I really disagree with piracy in general, so I'm stuck here with OpenOffice 🤗

Get a hold of yourself Null, get a job, LOL.
Fiat justitia ruat cælum

My era of providing technical support and malware removal on HackForums is over, so you can stop PM'ing me about it. Sorry.
I find this news quite funny.

Not using Microsoft Office anyways.
I try to use as least Microsoft products where possible due to upgrading them or re-installing them or uninstalling them always seem to fuck up somewhere due to it being so fucked up deeply integrated inside the windows system itself. Being a pain to fix.

Where something like open Office is even available in a portable version and never has any trouble uninstalling.
Human stupidity : Buying something they have no clue about, and then ask if they wasted their money.

(Jun 16, 2015 10:56 AM)Blindly Wrote:  Can you please read the thread again ? He's not using BITLOCKER. He got infected with one when he apparently hacked the bank's site.

^^^

I have never had any problem installing MS office. I use MS office at home and at work/school as well do the majority of Americans, Office is the most popular set of programs so....
[Image: M7tJcZL.gif]
(Mar 29, 2014 10:04 AM)Jagster™ Wrote:  ^^^

I have never had any problem installing MS office. I use MS office at home and at work/school as well do the majority of Americans, Office is the most popular set of programs so....

Microsoft Office 2007 Enterprise is what I use, my father has a license for his business. It is fantastic, and I make the best PowerPoints out of my whole school for my Environmental Science course. 😝

OpenOffice is a bootleg cheap alternative to Microsoft Office 20XX if you ask me, but there are those who need bootlegs 🤐
(Mar 29, 2014 11:26 AM)T e s s e r a c t Wrote:  Microsoft Office 2007 Enterprise is what I use, my father has a license for his business. It is fantastic, and I make the best PowerPoints out of my whole school for my Environmental Science course. 😝

OpenOffice is a bootleg cheap alternative to Microsoft Office 20XX if you ask me, but there are those who need bootlegs 🤐

Ooohhh son you're taking Env. Science course? Thats awesome! I am majoring in Env. Science! If you ever need help/ good sources (scientific journals) feel free to hit me up on skype! I just finished my term paper you would love it!

<3
[Image: M7tJcZL.gif]


Possibly Related Threads...
Thread / Author Replies Views Last Post
by .ÐÆṀØÑNov 17, 2014 05:16 PM 2 136 Nov 17, 2014 05:16 PM
Last Post: -Hyperion
by GearCEO™Apr 27, 2014 08:39 AM 3 308 Apr 27, 2014 08:39 AM
Last Post: tot3l_dumbass14
by The Sailor ϟMar 16, 2013 08:42 AM 0 260 Mar 16, 2013 08:42 AM
Last Post: The Sailor ϟ