Skip to content
  • Categories
  • Recent
  • Tags
  • Popular
  • World
  • Users
  • Groups
Skins
  • Light
  • Cerulean
  • Cosmo
  • Flatly
  • Journal
  • Litera
  • Lumen
  • Lux
  • Materia
  • Minty
  • Morph
  • Pulse
  • Sandstone
  • Simplex
  • Sketchy
  • Spacelab
  • United
  • Yeti
  • Zephyr
  • Dark
  • Cyborg
  • Darkly
  • Quartz
  • Slate
  • Solar
  • Superhero
  • Vapor

  • Default (No Skin)
  • No Skin
Collapse
Code Project
  1. Home
  2. The Lounge
  3. Office XP security hole

Office XP security hole

Scheduled Pinned Locked Moved The Lounge
c++htmlcomsecurityhelp
13 Posts 10 Posters 0 Views 1 Watching
  • Oldest to Newest
  • Newest to Oldest
  • Most Votes
Reply
  • Reply as topic
Log in to reply
This topic has been deleted. Only users with topic management privileges can see it.
  • C Offline
    C Offline
    Christian Skovdal Andersen
    wrote on last edited by
    #1

    Take a look at http://www.guninski.com/vv3-2demo.html This is *really* scarry! A fix can be downloaded at http://www.codeit.dk/christian/xpfix.zip The source code (C++/MFC) is available here: http://www.codeit.dk/christian/xpfix_src.zip Christian Skovdal Andersen

    N M Z P E 5 Replies Last reply
    0
    • C Christian Skovdal Andersen

      Take a look at http://www.guninski.com/vv3-2demo.html This is *really* scarry! A fix can be downloaded at http://www.codeit.dk/christian/xpfix.zip The source code (C++/MFC) is available here: http://www.codeit.dk/christian/xpfix_src.zip Christian Skovdal Andersen

      N Offline
      N Offline
      NormDroid
      wrote on last edited by
      #2

      DONT RUN THIS!!! I've tried the first link like a fool, it tunnelled thru our firewall straight into my Dev Machine, popuped up a cmd.exe box and Dir'd my c:\ This is damn worrying... Norm

      C A A P 4 Replies Last reply
      0
      • N NormDroid

        DONT RUN THIS!!! I've tried the first link like a fool, it tunnelled thru our firewall straight into my Dev Machine, popuped up a cmd.exe box and Dir'd my c:\ This is damn worrying... Norm

        C Offline
        C Offline
        Chris Meech
        wrote on last edited by
        #3

        Based on your response, Norm, I can only assume that the firewall I'm behind behaves a little more securely. When I click on the link, I'm told that there is 'no such host'. Although I don't understand the reference to Office XP in the subject. Chris

        N 1 Reply Last reply
        0
        • C Chris Meech

          Based on your response, Norm, I can only assume that the firewall I'm behind behaves a little more securely. When I click on the link, I'm told that there is 'no such host'. Although I don't understand the reference to Office XP in the subject. Chris

          N Offline
          N Offline
          NormDroid
          wrote on last edited by
          #4

          Chris, We're using BlackICE what firewall are you using, so I can order it immediately. Norm

          C 1 Reply Last reply
          0
          • N NormDroid

            Chris, We're using BlackICE what firewall are you using, so I can order it immediately. Norm

            C Offline
            C Offline
            Chris Meech
            wrote on last edited by
            #5

            I'm at work and it's a very LARGE corporate network (+20,000 user's). I actually have no idea what firewall software/hardware combination is in use. WRT BlackICE, check out www.grc.com for some comparisons about firewalls. I'll be interested to see what happens later at home, though. I use ZoneAlarm and have an always connected cable modem. I'll post what happens using that connection. Chris

            1 Reply Last reply
            0
            • N NormDroid

              DONT RUN THIS!!! I've tried the first link like a fool, it tunnelled thru our firewall straight into my Dev Machine, popuped up a cmd.exe box and Dir'd my c:\ This is damn worrying... Norm

              A Offline
              A Offline
              another
              wrote on last edited by
              #6

              Looking at the script code at the page, it's not going through any kind of firewall. It's all running on the client machine (your Dev Machine). A better firewall isn't going to help. Still, this is very bad. Just some VBScript and it could do some really bad things. Craig Dodge A catchy signature should appear here.

              1 Reply Last reply
              0
              • N NormDroid

                DONT RUN THIS!!! I've tried the first link like a fool, it tunnelled thru our firewall straight into my Dev Machine, popuped up a cmd.exe box and Dir'd my c:\ This is damn worrying... Norm

                A Offline
                A Offline
                Anders Molin
                wrote on last edited by
                #7

                I just got an dialogbox, telling about a runtime error in IE... - Anders Money talks, but all mine ever says is "Goodbye!"

                1 Reply Last reply
                0
                • C Christian Skovdal Andersen

                  Take a look at http://www.guninski.com/vv3-2demo.html This is *really* scarry! A fix can be downloaded at http://www.codeit.dk/christian/xpfix.zip The source code (C++/MFC) is available here: http://www.codeit.dk/christian/xpfix_src.zip Christian Skovdal Andersen

                  M Offline
                  M Offline
                  Michael Dunn
                  wrote on last edited by
                  #8

                  So for those of us without OXP, and without the balls to run a random web page with known malicious script, care to explain what happens? --Mike-- http://home.inreach.com/mdunn/ Sometimes, arming yourself with a big pointy stake just won't do you any good.

                  C 1 Reply Last reply
                  0
                  • C Christian Skovdal Andersen

                    Take a look at http://www.guninski.com/vv3-2demo.html This is *really* scarry! A fix can be downloaded at http://www.codeit.dk/christian/xpfix.zip The source code (C++/MFC) is available here: http://www.codeit.dk/christian/xpfix_src.zip Christian Skovdal Andersen

                    Z Offline
                    Z Offline
                    Zyxil
                    wrote on last edited by
                    #9

                    most of you guys probably aren't running Office XP. if you are running OXP the .ocx that shows your inbox on the page has the ability to get the Application object, which has the ability (this guy found out) to run any command on the system. if you are not running OXP then you get a script error. here's the article on the Reg http://www.theregister.co.uk/content/4/20373.html -John

                    1 Reply Last reply
                    0
                    • C Christian Skovdal Andersen

                      Take a look at http://www.guninski.com/vv3-2demo.html This is *really* scarry! A fix can be downloaded at http://www.codeit.dk/christian/xpfix.zip The source code (C++/MFC) is available here: http://www.codeit.dk/christian/xpfix_src.zip Christian Skovdal Andersen

                      P Offline
                      P Offline
                      Phil Boyd
                      wrote on last edited by
                      #10

                      This link actually demonstrates the security hole. Read the article linked in John Morales message! After that you're on your own. Phil Boyd MCP "I took the road less traveled..."

                      1 Reply Last reply
                      0
                      • N NormDroid

                        DONT RUN THIS!!! I've tried the first link like a fool, it tunnelled thru our firewall straight into my Dev Machine, popuped up a cmd.exe box and Dir'd my c:\ This is damn worrying... Norm

                        P Offline
                        P Offline
                        Paul Watson
                        wrote on last edited by
                        #11

                        Not only that but it opened my Outlook inbox and displayed the first email in it, along with a note from the coder saying that the message can be deleted. Holy socks.... regards, Paul Watson Cape Town, South Africa e: paulmwatson@email.com w: vergen.org

                        1 Reply Last reply
                        0
                        • M Michael Dunn

                          So for those of us without OXP, and without the balls to run a random web page with known malicious script, care to explain what happens? --Mike-- http://home.inreach.com/mdunn/ Sometimes, arming yourself with a big pointy stake just won't do you any good.

                          C Offline
                          C Offline
                          Christian Skovdal Andersen
                          wrote on last edited by
                          #12

                          There is an article here http://www.guninski.com/vv2xp.html For once the Microsoft bashing may be somewhat justified :-( Christian Skovdal Andersen

                          1 Reply Last reply
                          0
                          • C Christian Skovdal Andersen

                            Take a look at http://www.guninski.com/vv3-2demo.html This is *really* scarry! A fix can be downloaded at http://www.codeit.dk/christian/xpfix.zip The source code (C++/MFC) is available here: http://www.codeit.dk/christian/xpfix_src.zip Christian Skovdal Andersen

                            E Offline
                            E Offline
                            Erik Funkenbusch
                            wrote on last edited by
                            #13

                            While this is indeed a security hole, it's simply the result of a mistake. Someone accidentally marked a control as safe for scripting when it wasn't. It's a simple fix in the registry. These kinds of bugs are always going to be difficult, and it really has little to do with Office or Windows or whatever. The most common kind of bug is a buffer overflow bug, and that can cause all kinds of havoc. Sadly, there is tons of code that works just fine, but exposes security holes. FTP programs, web servers, email programs, and many more, and they don't have to come from MS to do that.

                            1 Reply Last reply
                            0
                            Reply
                            • Reply as topic
                            Log in to reply
                            • Oldest to Newest
                            • Newest to Oldest
                            • Most Votes


                            • Login

                            • Don't have an account? Register

                            • Login or register to search.
                            • First post
                              Last post
                            0
                            • Categories
                            • Recent
                            • Tags
                            • Popular
                            • World
                            • Users
                            • Groups