[Null Byte]

Hey HF,
Just here to give you a heads up that Microsoft has scheduled to release a few critical patches this coming Tuesday, along with the final patches to Windows XP before its final drop of support. It is essential that you update your OS as soon as these are released.

These patches will fix:

• Remote code execution vulnerability in Microsoft Word 2010 (CVE-2014-1761)
  


• Web-based attacks using RTF vulnerability
  


• Local filesystem RTF vulnerability
  


• Internet Explorer buffer overflow vulnerability
  


• Miscellaneous security flaws in the Windows OS
  

Stay secure, HF 🤝

[eiqhtz]

The Microsoft Word 2012 patch, is it the one that fixes the .doc exploits and what not?
I'm hoping that'll get fixed.

[Aura]

The Microsoft Word 2012 patch, is it the one that fixes the .doc exploits and what not?
I'm hoping that'll get fixed.

I guess it's to fix this exploit :

https://hackforums.net/showthread.php?tid=4139289

Also, I thought that Word 2010 wasn't touched by that exploit ?

[Null Byte]

@Everyone: I believe that all MS Word exploits in the wild are getting patched. That will hurt a few HF shops.

[eiqhtz]

I guess that'll be good for the white hats, lol.

Bad for the HF shops, etc.

---

Microsoft has released a security advisory for Microsoft Word. A vulnerability exists for remote code execution which could allow an attacker to gain user rights by opening a specifically crafted Rich Text Format file.
Applying the Microsoft Fix it solution will disable the opening of RTF content in Microsoft Word, preventing the exploitation of this vulnerability.
US-CERT recommends that users and administrators review Microsoft Security Advisory 2953095 and apply any necessary updates to help mitigate the risk.

Read this from US-Cert. Guessing it has to do with your post.

[Novo]

This is some good news for the white-hats out there. Will be a blow for the black-hat hackers.