New 0day PowerPoint Exploit

system · 2006-09-28T12:14:53.000Z

McAfee is warning that a new 0day PowerPoint exploit has been seen in the wild. Currently being used in targeted attacks. Remote code execution possible. Microsoft may have quietly added protection for it to their own antivirus program without alerting the security community.

http://www.nist.org/news.php?extend.173

system · 2006-09-28T19:06:55.000Z

does avast detected it ???

Al968

FreewheelinFrank · 2006-09-29T07:54:39.000Z

Thanks for the heads up drhayden1!

Microsoft may have quietly added protection for it to their own antivirus program without alerting the security community.

That was nice of them!

With all the holes, they should just rename it Microsoft Orifice.

Incidentally, security updates for Office products don’t always come up on Windows Update- it’s worth checking at Office Update. I found I had a Word vulnerability even after updating at Windows Update!

http://office.microsoft.com/en-us/officeupdate/default.aspx

system · 2006-09-29T10:45:27.000Z

actually now its Microsoft office ;D
http://update.microsoft.com/microsoftupdate/v6/default.aspx?ln=fr
That shows all the updates

Al968

FreewheelinFrank · 2006-10-09T19:55:31.000Z

Patch coming Tuesday!

http://blog.washingtonpost.com/securityfix/2006/10/microsoft_to_issue_eleven_patc.html

system · 2006-10-09T20:22:33.000Z

Yeah, those second tuesday of the month updates ;D

Al968

Announcements