20 lines
No EOL
1.1 KiB
Text
20 lines
No EOL
1.1 KiB
Text
Exploit Title: Microsoft Word Local Machine Zone Remote Code Execution Vulnerability
|
|
Date: July 15th, 2015
|
|
Exploit Author: Eduardo Braun Prado
|
|
Vendor Homepage : http://www.microsoft.com
|
|
Version: 2007
|
|
Tested on: Microsoft Windows XP, 2003, Vista, 2008, 7, 8, 8.1
|
|
CVE: CVE-2015-0097
|
|
|
|
Original Advisory: https://technet.microsoft.com/library/security/ms15-022
|
|
|
|
Microsoft Word, Excel and Powerpoint 2007 contains a remote code execution vulnerability because it is possible
|
|
to reference documents such as Works document (.wps) as HTML. It will process HTML and script code in the context
|
|
of the local machine zone of Internet Explorer which leads to arbitrary code execution.
|
|
By persuading users into opening eg. specially crafted .WPS, ".doc ", ".RTF " (with a space at the end)
|
|
it is possible to triggerthe vulnerability and run arbitrary code in the context of the logged on Windows user.
|
|
|
|
Exploit code here :
|
|
|
|
https://onedrive.live.com/embed?cid=412A36B6D0A9436A&resid=412A36B6D0A9436A%21156&authkey=AA_JVoZcoM5kvOc
|
|
https://gitlab.com/exploit-database/exploitdb-bin-sploits/-/raw/main/bin-sploits/37657.zip |