Bugtraq mailing list archives

Re: @Stake Advisory: Microsoft Office 2000 ClipArt Vulnerablity


From: dmiller () WFDEVELOPMENT COM (Dustin Miller)
Date: Tue, 7 Mar 2000 20:56:28 -0600


This bug does not seem to affect Windows Millennium Edition Build 2476,
oddly enough.  I do have Office 2000 Professional installed (retail
version), and CAG alarms with an error, but no key was created.

-----Original Message-----
<SNIP>
        Advisory Name: ClipArt Gallery Overflow
    Advisory Released: 03/06/00
          Application: Microsoft Office 2000
             Severity: An attacker can seize control of a Windows 95, 98,NT,
                       or 2000 machine via any HTML source, including
                       Microsoft Outlook e-mail.
               Status: Vendor patch available, workaround available
               Author: dildog () l0pht com
                  WWW: http://www.l0pht.com/advisories.html

</SNIP>


Current thread: