Timeline for xml library vulnerabilities, regarding post-exploitation
Current License: CC BY-SA 3.0
11 events
| when toggle format | what | by | license | comment | |
|---|---|---|---|---|---|
| Jun 5, 2011 at 22:50 | comment | added | fightermagethief | @avid: the reason I thought XML libraries were involved was because the files that were remotely put in my 'trash can' were all XML files that looked liked they had a few structs or something defined in them and werent just single scripts. I am not sure what the connection would be from those files to the infection process. But isnt XLS just a form of XML? | |
| Jun 5, 2011 at 19:53 | comment | added | AviD♦ | why do you keep calling it xml, but you're talking about an XLS file, no? I don't think that matters - it's either the VBA scripts (do these work on mac?), or a generic trojan / malware. | |
| Jun 5, 2011 at 19:52 | history | edited | AviD♦ |
edited tags
|
|
| Jun 1, 2011 at 12:43 | vote | accept | fightermagethief | ||
| Jun 1, 2011 at 11:25 | history | tweeted | twitter.com/#!/StackSecurity/status/75885586329767936 | ||
| Jun 1, 2011 at 6:24 | answer | added | Andrew Russell | timeline score: 7 | |
| May 31, 2011 at 17:20 | comment | added | fightermagethief | @john: maybe you could clarify for me, is it the program that would be exploited, via either its own xml libraries or other software flaw; or the xls file simply runs a VBA script, for instance, attached to a cell that makes changes to xml libraries somewhere else on the system? | |
| May 31, 2011 at 13:34 | comment | added | fightermagethief | @john: 14.0.2, from what i read about, the problem might have been just opening the xls file that was emailed to me. I didnt prevent the VBA scripts functionality from 'phoning out' and just opened the file because i trusted the sender. | |
| May 31, 2011 at 13:23 | comment | added | john | There are not many ready-made exploits for max excel out there, at least not in non-commercial exploit packs. Which version of office do you have? | |
| May 31, 2011 at 13:13 | history | edited | nealmcb |
edited tags
|
|
| May 31, 2011 at 12:16 | history | asked | fightermagethief | CC BY-SA 3.0 |