Old and busted: Code Execution in Excel via CSV-Import....

BM-NBN5C4Fxxpiz2NWx1jjXovo7myq1pp1F
Oct 12 23:48 [raw]

<a href="https://blog.fefe.de/?ts=a7238e78">[l]</a> Old and busted: Code Execution in Excel via CSV-Import.<p>New hotness: <a href="https://sensepost.com/blog/2017/macro-less-code-exec-in-msword/">Code Execution in MS Word ohne Makros und ohne Memory Corruption</a>. Per DDE!<p>Aber keine Sorge, das ist kein Bug. Das soll so.<blockquote lang="en">26/09/2017 – Microsoft responded that as suggested it is a feature and no further action will be taken, and will be considered for a next-version candidate bug.</blockquote>

[chan] fefe
BM-2cVf4AJ5E11LXpaHU19oQwAMPtynNjYRa5